by 安全扫描
OpenClaw
安全
medium confidenceThe skill's declared requirements and runtime instructions are generally consistent with a cloud-based video frame extraction service, but there are small metadata inconsistencies and privacy trade-offs (it uploads your video to an external API and uses a token) you should review before installing.
评估建议
This skill appears to do what it says — it will upload videos to mega-api-prod.nemovideo.ai and use a NEMO_TOKEN (or automatically request a short-lived anonymous token). Before installing: 1) Decide whether you are comfortable sending your media to that external domain and review its privacy/retention policy (no homepage provided in the registry). 2) Note the skill may generate and use an anonymous token (100 free credits, 7-day expiry) if NEMO_TOKEN is not set; if you prefer to control the tok...详细分析 ▾
✓ 用途与能力
The skill is described as a cloud-based video frame extraction service and its runtime instructions only reference a single external video-processing backend and a single credential (NEMO_TOKEN), which is appropriate for that purpose.
ℹ 指令范围
Instructions are narrowly scoped to creating a session, uploading video, driving SSE/chat, polling export status, and returning download URLs. It will upload user-provided videos to https://mega-api-prod.nemovideo.ai and will attempt to obtain an anonymous token if NEMO_TOKEN is not provided; this network activity is expected but you should confirm you’re comfortable sending your media to that endpoint.
✓ 安装机制
No install spec or code files — instruction-only skill. This is the lowest-risk install model (nothing written to disk by an installer).
ℹ 凭证需求
The skill only requires a single credential (NEMO_TOKEN), which matches the declared purpose. However, SKILL.md frontmatter also references a config path (~/.config/nemovideo/) for metadata even though the registry metadata earlier listed no required config paths — that's an internal inconsistency to confirm. The skill will also create an anonymous token via an external API if no token is present.
✓ 持久化与权限
always:false and normal autonomous invocation settings. The skill expects to keep a session_id in-memory during interactions; there is no explicit instruction to modify other skills or system-wide settings. Confirm whether your agent runtime persists session data to disk and where.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Video Frames Online — Version 1.0.0 - Initial release: cloud-based tool to extract frames from video clips (up to 2 minutes, default 1080p). - Supports frame extraction (every Nth frame, specific formats), quick edits, and batch processing; outputs JPG, PNG, MP4, and more. - Simple setup with automatic anonymous token generation (100 free credits, 7-day expiry) and cloud session management. - Guided workflows: upload video, specify extraction details, receive frame images in 20–40 seconds. - Robust error handling and user feedback for uploads, exports, session state, and credit checking.
● 无害
安装命令
点击复制官方npx clawhub@latest install video-frames-online
镜像加速npx clawhub@latest install video-frames-online --registry https://cn.longxiaskill.com镜像同步中