📦 Video Editing Ai Helper — 技能工具
v1.0.0edit raw video footage into edited video clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators and marketers use it for q...
0· 13·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThe skill's requirements and runtime instructions are broadly consistent with a cloud video-editing integration that uploads user videos to a remote backend using a NEMO_TOKEN; there are a few minor metadata inconsistencies and privacy considerations you should review before use.
评估建议
This skill appears to do what it says: it uploads your video to a remote service (mega-api-prod.nemovideo.ai) and performs edits there. Before installing/using it: 1) Confirm you are comfortable having your raw video sent to that external domain (privacy and retention concerns). 2) Decide whether to provide your own NEMO_TOKEN (so you control credentials) or rely on the anonymous-token flow (the skill can obtain a time-limited anonymous token automatically). 3) Ask the publisher to clarify the m...详细分析 ▾
✓ 用途与能力
The name/description (AI-assisted cloud video editing) matches the actions requested in SKILL.md: creating a session, uploading video files, sending SSE messages, and requesting renders from https://mega-api-prod.nemovideo.ai. The only oddity is a registry vs SKILL.md mismatch: the registry metadata lists no required config paths, but the SKILL.md frontmatter references a config path (~/.config/nemovideo/). This is a metadata inconsistency but not obviously malicious.
✓ 指令范围
SKILL.md instructs the agent to read NEMO_TOKEN from the environment (or obtain an anonymous token via the documented API), create sessions, upload files/URLs, and poll render endpoints — all within the scope of remote video editing. It does instruct the agent to detect an install path to set X-Skill-Platform (reads known install paths), which requires inspecting the filesystem location of the skill; that's reasonable for attribution headers but worth noting because it touches filesystem state. There are no instructions to read unrelated sensitive files or other environment variables.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files. That is the lowest install risk: nothing is written to disk by an installer step. The runtime behavior will make network calls to the described API endpoints.
ℹ 凭证需求
The skill declares a single primary credential, NEMO_TOKEN, which is appropriate for a cloud service integration. SKILL.md also documents an anonymous-token flow when NEMO_TOKEN is not present (it will POST to /api/auth/anonymous-token and use returned token). The small inconsistency between registry required config paths (none) and SKILL.md frontmatter (mentions ~/.config/nemovideo/) should be clarified: it could mean the skill expects to read or write a config directory for cached tokens or settings.
✓ 持久化与权限
always is false and the skill does not request elevated or persistent platform privileges. It does instruct the agent to keep session_id for the session lifetime (in-memory/session-level), which is expected for a session-based remote service. There is no instruction to modify other skills or system-wide configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/14
Initial release of Video Editing AI Helper. - Instantly edit raw video footage into polished clips using AI-powered cloud processing. - Supports MP4, MOV, AVI, and WebM uploads up to 500MB, with 1080p MP4 exports. - Automatic setup with quick anonymous access and 100 free editing credits. - User-friendly chat commands for upload, editing, export, and credits balance. - Fast processing on cloud GPUs—most clips ready in 1–2 minutes. - Includes error handling, session resumption, and common workflow guidance.
● 无害
安装命令
点击复制官方npx clawhub@latest install video-editing-ai-helper
镜像加速npx clawhub@latest install video-editing-ai-helper --registry https://cn.longxiaskill.com