📦 Maker：创客
v1.0.0文本生成器 无需学习专业编辑软件。只需描述需求——为我的视频生成屏幕文字标签和标题卡——即可获得文本……
0· 17·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
medium confidenceThe skill largely matches its stated purpose (upload a video, request text overlays, and call a cloud render API), but there are mismatches and a few instructions that broaden its scope in ways you should review before installing.
评估建议
This skill appears to do what it says (upload a video and call a cloud API to produce text-overlaid videos) but you should confirm a few things before installing: 1) The skill will send your video files to https://mega-api-prod.nemovideo.ai — only proceed if you are comfortable uploading the content. 2) It will use NEMO_TOKEN if present, or request an anonymous token and may store tokens under ~/.config/nemovideo/ — check that you consent to storing auth tokens locally. 3) The SKILL.md tells the...详细分析 ▾
ℹ 用途与能力
The skill's declared primary credential (NEMO_TOKEN) and the described API endpoints are consistent with a cloud video-rendering/text-overlay service. However, the SKILL.md frontmatter claims a config path (~/.config/nemovideo/) for storing data while the registry metadata reported no required config paths — an inconsistency that should be resolved. Requesting a local config path is plausible for caching tokens but is not strictly necessary for a pure instruction-only skill.
⚠ 指令范围
Runtime instructions tell the agent to: use NEMO_TOKEN (or create an anonymous token by POSTing to an external URL), create sessions, upload local files (multipart with files=@/path), poll render status, and detect install paths to set attribution headers. These are expected for the feature, but two items raise concern: (1) the agent is instructed to 'keep the technical details out of the chat' (which encourages hiding network/system activity from users), and (2) detecting install paths and reading/writing a config directory implies filesystem access beyond just processing user-uploaded files. Confirm whether the agent will only access files the user explicitly uploads and whether it will write tokens/configs to disk.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files — lowest install risk. No external binaries or downloads are introduced by the skill itself.
ℹ 凭证需求
The skill requests only one environment variable, NEMO_TOKEN, which is proportional to a cloud API client. But SKILL.md also describes generating/storing an anonymous token and references a config path (~/.config/nemovideo/). That implies potential local storage of auth tokens — acceptable for a client but worth disclosing. There are no other unrelated secrets requested.
ℹ 持久化与权限
always:false (normal). The instructions imply creating and using session tokens and potentially storing credentials in ~/.config/nemovideo/. The skill does not request permanent platform-wide privileges, but writing tokens/configs into the user's home directory would be a persistent side effect — verify where tokens are stored and whether the skill will modify other skill/system configs (it should not).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/21
Maker Text Generator — Initial Release - Quickly generate text overlays and title cards for uploaded video clips—no manual editing needed. - Supports MP4, MOV, AVI, and WebM files up to 500MB; typically delivers results in 20–40 seconds. - Automatic session and credit management (including free anon starter tokens) so you can start editing instantly. - Clear status indicators and user-friendly feedback throughout upload, generation, and export steps. - Simple commands for video export, credits check, timeline state, and batch workflows.
● Pending
安装命令
点击复制官方npx clawhub@latest install maker-text-generator
镜像加速npx clawhub@latest install maker-text-generator --registry https://cn.longxiaskill.com