📦 字幕
v1.0.0Generator Best 只需输入需求，即可将3分钟YouTube教程视频转为带1080p字幕的视频文件。无论是为视频自动添加精准字幕……
0· 19·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
medium confidence该技能与云字幕/渲染服务内部一致：需要 NEMO_TOKEN，并指示代理上传视频并调用 nemovideo.ai API；无无关凭据或安装程序，但来源未知，且存在轻微元数据不匹配及自动创建令牌行为，需谨慎。
评估建议
This skill appears to do what it says: it uploads videos to nemovideo.ai and uses a single service token (NEMO_TOKEN). Before installing, consider: 1) Privacy — your video files will be sent to an external cloud service; do not upload sensitive content. 2) Token handling — the skill will try to create an anonymous token automatically if NEMO_TOKEN is not set; ask for user consent before that happens and prefer short-lived or limited-scope tokens. 3) Metadata mismatch — the SKILL.md mentions a co...详细分析 ▾
✓ 用途与能力
Name/description (generate and embed subtitles) align with the instructions: the SKILL.md describes uploading video files and calling a remote rendering/subtitling API (mega-api-prod.nemovideo.ai) and uses a single service token (NEMO_TOKEN). The requested environment variable (NEMO_TOKEN) is appropriate for a cloud backend. No unrelated credentials or binaries are requested.
ℹ 指令范围
Instructions are focused on session creation, uploading media, SSE-driven editing, and export polling — all consistent with the stated purpose. Important: the skill will upload user-provided video files to the external service and may automatically obtain an anonymous token if NEMO_TOKEN is not present. It also requires that specific attribution headers be added to every request. The SKILL.md tells the agent to 'not expose tokens or raw API output', which is good, but automatic network calls and token creation are effectively autonomous actions and should be disclosed to the user before running.
✓ 安装机制
Instruction-only skill with no install spec and no code files — the lowest disk/write risk. All heavy work occurs on the remote API; nothing is downloaded or installed locally by the skill.
ℹ 凭证需求
Only one credential (NEMO_TOKEN) is declared and used, which matches the cloud API workflow. However, SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/) while the registry metadata listed no required config paths — this metadata mismatch should be resolved. Also note the skill contains logic to obtain an anonymous NEMO_TOKEN by POSTing to an external endpoint if the token is missing, which means the agent may create and use credentials automatically.
✓ 持久化与权限
always:false and no install actions. The skill does not request system-wide privileges or claim to modify other skills. Autonomous invocation is allowed (platform default) but is not combined with unusually broad credential access or persistent presence.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
- Subtitle Generator Best 初版发布。 - 通过云端后端即时为视频文件生成并嵌入 AI 字幕。 - 支持 3 分钟 YouTube 教程工作流：上传、描述、下载带字幕的 1080p MP4，不到一分钟。 - 首次使用自动完成 token 与 session 配置；上传无缝，编辑基于命令。 - 通过简单聊天指令完成导出、扣费、状态查询与上传。 - 全面错误处理：认证、余额、文件异常、速率限制。 - 支持多种音视频格式；最大文件 500MB。
● 无害
安装命令
点击复制官方npx clawhub@latest install subtitle-generator-best
镜像加速npx clawhub@latest install subtitle-generator-best --registry https://cn.longxiaskill.com