by 安全扫描
OpenClaw
安全
medium confidenceThe skill's declared purpose (cloud 4K video editing) matches its instructions and requested credential (NEMO_TOKEN); nothing obvious is requesting unrelated secrets or installing code, but the skill is from an unknown source so exercise caution before uploading sensitive content or granting long-lived credentials.
评估建议
This skill appears internally consistent for a cloud 4K video editor: it needs a NEMO_TOKEN (or will create a short-lived anonymous token) and then uploads files to the nemovideo.ai API. Before installing or using: 1) Verify the service domain (mega-api-prod.nemovideo.ai) is legitimate for the product you expect. 2) Avoid putting highly sensitive footage or secrets into uploads. 3) If you prefer control, set a dedicated NEMO_TOKEN with minimal scope rather than letting the skill generate/store l...详细分析 ▾
✓ 用途与能力
Name/description, required env var (NEMO_TOKEN), and the endpoints/flows in SKILL.md all align with a cloud video-editing service. The single primary credential requested (NEMO_TOKEN) is appropriate for a remote API service.
ℹ 指令范围
Runtime instructions describe authenticating (anonymous-token or provided NEMO_TOKEN), creating a session, uploading files, streaming SSE, polling status, and starting renders — all expected. The doc references deriving headers from YAML frontmatter and detecting install-path to set X-Skill-Platform, which could prompt the agent to inspect filesystem paths if implemented; SKILL.md itself does not explicitly instruct reading unrelated local files.
✓ 安装机制
No install spec and no code files: instruction-only skill. This minimizes on-disk risk since nothing is downloaded or executed as part of installation.
✓ 凭证需求
Only NEMO_TOKEN is required and is justified by the documented API calls. Metadata lists a config path (~/.config/nemovideo/) but the skill does not explicitly require arbitrary system credentials or unrelated environment variables.
✓ 持久化与权限
always:false and default autonomous invocation are normal. The skill asks to keep session_id for ongoing operations (transient). It does not request persistent platform-wide changes or access to other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Initial release of Video Editing with 4K - Cloud-based tool for editing and exporting high-resolution 4K video projects. - Supports uploading MP4, MOV, AVI, MKV files (up to 500MB). - Simple setup with automatic anonymous NEMO_TOKEN generation if not provided. - Handles tasks like trimming, color grading, aspect ratio adjustments, and text/audiotrack overlays, all via cloud GPUs. - Fast turnaround: 4K MP4 output available in 1–3 minutes. - Provides clear feedback for authentication, credits, file limits, and common errors.
● 无害
安装命令
点击复制官方npx clawhub@latest install video-editing-with-4k
镜像加速npx clawhub@latest install video-editing-with-4k --registry https://cn.longxiaskill.com