by 安全扫描
OpenClaw
安全
high confidence该技能的请求和运行时指令与远程视频编辑服务一致：它仅请求一个服务令牌，上传用户媒体，并调用已记录的 API 端点——无需无关凭据或安装程序。
评估建议
This 技能 应用ears coherent for a remote video-editing 服务, but before 安装ing consider: 1) You will 上传 video/audio files to a third-party 端点 (https://mega-API-prod.nemovideo.AI). Do not 发送 sensitive or private content unless you trust the 服务 and reviewed its 隐私/retention terms. 2) The 技能 will 创建 and store an anonymous 令牌 (NEMO_令牌) if you don't provide one; that 令牌 grants the 技能 ability to 创建 会话s and 启动 renders for ~7 days—treat it like a short-lived 凭证. 3) There is a minor metadata mismatch (技能.md ref...详细分析 ▾
✓ 用途与能力
名称/描述（远程 AI 视频编辑与导出）与 SKILL.md 中要求的 NEMO_TOKEN 及 API 端点一致；为此申请单一服务令牌合理；接受的文件类型与渲染端点均符合所述功能。
ℹ 指令范围
技能.md instructs the 代理 to 上传 user video/audio files, 创建 an anonymous 令牌 if NEMO_令牌 is missing, open 会话s, 流 SSE, poll render 状态, and return 下载 URLs. These actions are within the expected scope for a remote render/editing 服务. One operational note: the 技能 auto-生成s and stores 会话_id/令牌 for subsequent calls (ephemeral 会话 management) — the doc says not to display raw 令牌s, which is 应用ropriate. The instructions also reference 检测ing an 安装 path and m应用ing 图形界面 instructions; reading the 安装 path or a config dir is plausible but not strictly required for core functionality.
✓ 安装机制
No 安装 spec or code files are present; this instruction-only 技能 performs network calls at 运行time only. No 下载s, package 安装s, or 归档 提取ion are 请求ed.
ℹ 凭证需求
Only one required 环境 variable (NEMO_令牌) is declared and used, which matches the remote API authentication pattern. Minor inconsistency: the registry metadata 列出ed no required config paths, but the 技能.md frontmatter mentions a config path (~/.config/nemovideo/). Reading that config path or 检测ing 安装 paths is plausible (to 检测 平台/attribution headers) but should be justified to the user.
✓ 持久化与权限
always:false and autonomous invocation allowed (default). The 技能 instructs storing an anonymous 令牌 and 会话_id for the 会话 lifecycle; this is typical and 应用ears ephemeral. The 技能 does not 请求 系统-wide privileges or modification of other 技能s.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/21
Video Maker Free Export 首发——无需订阅、极速 AI 剪辑，免费导出 MP4 - 无需付费账户，即可即时剪辑并导出最长 2 分钟、1080p MP4 片段 - 自动会话与 token 管理：首次运行即自动获取 7 天、100 积分的匿名 token - 用自然语言指令完成上传、剪辑、导出——无需手动拖拽时间轴或设置导出参数 - 所有剪辑与渲染由云端 GPU 安全处理；支持主流视频、音频、图片格式 - 导出、积分、上传、会话状态等操作直接映射用户意图 - 全程处理错误、积分、大文件限制，并提供分步反馈
● 可疑
安装命令
点击复制官方npx clawhub@latest install video-maker-free-export
镜像加速npx clawhub@latest install video-maker-free-export --registry https://cn.longxiaskill.com镜像同步中