🎬 Video Merge — 一键合并视频
v1.0.0上传多段 MP4/MOV/AVI/WebM 格式视频（单文件≤500MB），无需拖动时间轴即可自动合并成可直接发布的 MP4 成片。
0· 76·0 当前·0 累计
by 下载技能包
最后更新
2026/4/12
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill is coherent with a cloud video-merge service: it will upload your video files to https://mega-api-prod.nemovideo.ai and requires an API token (NEMO_TOKEN) or will obtain an anonymous token for you. Before installing or using it, consider: (1) Privacy: your videos will be sent to an external service — confirm you are comfortable sharing that content. (2) Verify the endpoint and owner: the skill source is 'unknown' and homepage is absent; if you need stronger assurance, ask the publishe...详细分析 ▾
ℹ 用途与能力
The skill is a cloud video-merge tool and asks only for NEMO_TOKEN (the service API token), which is proportional to its stated purpose. Minor mismatch: the public registry metadata listed no required config paths, but the SKILL.md YAML frontmatter includes a configPaths entry (~/.config/nemovideo/). This is a small inconsistency in metadata but could indicate the skill expects a local nemovideo config directory.
ℹ 指令范围
The SKILL.md directly instructs the agent to upload user video files and call nemovideo.ai endpoints (session, upload, export, SSE) — exactly what a cloud merge tool must do. It also instructs the agent to detect an install path to set an X-Skill-Platform header, which implies the agent may inspect filesystem paths; that is not clearly declared in the registry. Otherwise the instructions stay within the stated purpose and do not ask for unrelated files or secrets.
✓ 安装机制
Instruction-only skill with no install spec and no code files — lowest-risk installation model. Nothing is downloaded or written to disk by an install step.
ℹ 凭证需求
Only NEMO_TOKEN is declared as required and is the primary credential, which fits a cloud API workflow. The skill also describes an anonymous-token fallback (POST to mega-api-prod.nemovideo.ai) and says to 'use it as NEMO_TOKEN' — it's unclear whether that token is stored persistently or only used in-memory during a session. The earlier-mentioned configPaths entry (present in SKILL.md but not in registry) raises a small question about whether local config files might be read.
✓ 持久化与权限
always:false and default model invocation are normal. The skill does not request permanent platform-level privileges. The only persistence ambiguity is whether the acquired anonymous token might be written or bound to a user account — the docs mention registration links but do not instruct the skill to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/12
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install video-merge
镜像加速npx clawhub@latest install video-merge --registry https://cn.longxiaskill.com镜像同步中