🎙️ 播客
v1.0.0Video Onlineconvert：用此技能将音频或视频文件转换为可分享的 podcast 视频，支持 MP3、MP4、WAV、MOV，最大 500 MB。适合 podcasters 与内容创作者……
0· 14·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly does what it claims (convert uploaded audio/video via a remote API) but has small but meaningful inconsistencies around credentials and metadata that you should understand before installing.
评估建议
This skill calls a third‑party API (mega-api-prod.nemovideo.ai) to upload your files and render videos. Before installing: 1) Note the skill can auto-request an anonymous token from that service if you don't supply NEMO_TOKEN — it will make outbound network calls and create a session token valid for a limited time. 2) Clarify where tokens/session IDs are stored (are they persisted to disk or agent config?), and whether uploads or generated videos are retained by the provider or shared. 3) Be cau...详细分析 ▾
ℹ 用途与能力
The declared purpose (convert podcast audio/video to shareable MP4) matches the API endpoints and operations described in SKILL.md. However the registry metadata vs the skill frontmatter disagree: the registry reported no required config paths while the SKILL.md metadata embeds configPaths (~/.config/nemovideo/). Also the skill declares NEMO_TOKEN as a required/primary credential but its runtime instructions include an anonymous-token flow that obtains a token automatically — making the declared "required" env var inconsistent with the runtime behavior.
✓ 指令范围
Runtime instructions are limited to interactions with the nemovideo.ai API (auth, session creation, upload, render, poll, download). The skill instructs generating a client UUID and posting to an anonymous-token endpoint if no NEMO_TOKEN is present. It asks to detect install path for an X-Skill-Platform header (minor local path inspection) but does not instruct reading unrelated files or other environment variables.
✓ 安装机制
No install spec or code is present (instruction-only). That minimizes disk-write and arbitrary code risk.
⚠ 凭证需求
Only NEMO_TOKEN is declared, which is appropriate for an API-backed service. But the SKILL.md provides automatic anonymous-token acquisition if NEMO_TOKEN is absent, so requiring NEMO_TOKEN seems unnecessary or inconsistent. The skill will perform network requests to obtain/use tokens and store a session_id; how and where tokens/session IDs are stored is not specified.
✓ 持久化与权限
always:false and no instructions to modify other skills or system-wide config. The skill asks the agent to store a session_id for subsequent requests — normal for a session-based API — but does not request permanent elevated presence.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
- Initial release of Podcast Video Online skill. - Convert podcast audio or video files (MP3, MP4, WAV, MOV, up to 500MB) into 1080p MP4 videos for sharing on YouTube or social media. - Supports features like captioned video, waveform visuals, and quick cloud processing (1–2 minutes on GPU). - Handles upload, editing, preview, export, and credits queries with clear user prompts. - Requires free token for 7-day usage; all processing happens remotely, no local install needed. - Includes detailed error handling and easy authentication setup.
● 无害
安装命令
点击复制官方npx clawhub@latest install podcast-video-online
镜像加速npx clawhub@latest install podcast-video-online --registry https://cn.longxiaskill.com