✂️ 短裤
v1.0.0Editor Free 跳过专业剪辑软件的学习曲线。只需描述你的需求——把它剪成 60 秒的 YouTube Short，加上字幕和转场——一个…
0· 18·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly fits its stated purpose (cloud-based short-form video editing) but its runtime instructions contain a few inconsistencies and open-ended actions (notably file upload behavior and a metadata/config-path mismatch) that could be abused to exfiltrate files or leak data if the agent is given broad filesystem/network access.
评估建议
Before installing or invoking this skill, consider these precautions:
- Trust the backend: The skill sends video and metadata to https://mega-api-prod.nemovideo.ai. Only proceed if you trust that service and its privacy policy.
- Limit file access: Ensure the agent (or the environment running it) is only allowed to read user-provided video files and not arbitrary system paths. The SKILL.md uses generic file path uploads (e.g., files=@/path) which could exfiltrate other files if the agent has br...详细分析 ▾
ℹ 用途与能力
The skill's name and description match the actions in SKILL.md (upload video, create session, render/export). Requested credential NEMO_TOKEN is expected for a third‑party video backend. Minor inconsistency: registry metadata reported no required config paths, but the SKILL.md frontmatter includes configPaths (~/.config/nemovideo/). This mismatch should be resolved.
⚠ 指令范围
Instructions explicitly tell the agent to upload files via multipart using file paths (e.g., -F "files=@/path") and to POST arbitrary URLs — the document does not restrict uploads to user-provided attachments or validate the source path. That leaves room for an agent to read and upload arbitrary files from the filesystem if it has permission. The skill also instructs detecting install paths to set X-Skill-Platform (reading ~/.clawhub/ or ~/.cursor/skills/), which requires probing the local environment. These behaviors are functionally plausible for a video upload tool but are broad and could be abused without tighter constraints.
✓ 安装机制
No install spec and no code files — instruction-only skill. This is lower risk because nothing is written to disk by the skill package itself.
✓ 凭证需求
Only one credential is declared (NEMO_TOKEN) and it is the primary env var used for API authentication. That is proportionate for a cloud video processing service. The SKILL.md also documents an anonymous-token flow for when no token is present, which is consistent with requiring that token.
✓ 持久化与权限
always:false and no indication the skill modifies other skills or system-wide settings. It stores transient session_id for operations, which is expected. Autonomous invocation is allowed (platform default) but not combined with elevated system privileges here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Shorts Editor Free — initial release - AI-powered tool to cut, caption, and export vertical YouTube Shorts up to 60 seconds from raw video files. - Upload MP4, MOV, AVI, or WebM files (max 500MB) for rapid cloud-based editing and rendering. - No professional editing skills or paid software needed — describe your edit, get an instant Shorts-ready result. - Includes setup automation, free anonymous usage (with token), cloud session management, and error handling. - Export in 1080p MP4, check credits, manage project state, and re-edit with fast turnaround (30-60 seconds per job).
● 无害
安装命令
点击复制官方npx clawhub@latest install shorts-editor-free
镜像加速npx clawhub@latest install shorts-editor-free --registry https://cn.longxiaskill.com镜像同步中