🎯 视频 对象
v1.0.0Skip the 学习 curve of 专业 editing 软件. Describe what you want — track and highlight the moving car in the background throughout the clip —...
0· 22·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThe skill's claimed purpose (server-side object tracking and export) matches the actions described (uploading videos, calling the remote NEMO API, managing a session token), but there are a few small inconsistencies and privacy considerations you should review before use.
评估建议
This skill uploads your video files to a third-party API (mega-api-prod.nemovideo.ai) and uses a bearer token (NEMO_TOKEN) or an anonymous token it can obtain for you. Before installing or invoking it, consider: 1) Privacy: do you want these videos sent to an external service? Confirm the vendor, retention and deletion policy for uploaded media. 2) Credentials: you can set a specific NEMO_TOKEN or let the skill generate an anonymous token (temporary credits); avoid reusing sensitive credentials....详细分析 ▾
✓ 用途与能力
Name/description (object tracking and export) lines up with the runtime instructions: upload video files, create/use a NEMO_TOKEN, create a session, send SSE and render requests to the listed nemo API endpoints. The primary credential requested (NEMO_TOKEN) is appropriate for a hosted processing service.
ℹ 指令范围
Instructions ask the agent to upload local video files (multipart/form-data or URL uploads), create/use an anonymous token if NEMO_TOKEN is missing, and persist session_id for job polling. They also instruct the agent to derive attribution headers (X-Skill-Source, X-Skill-Version, X-Skill-Platform) including detecting the skill install path. These behaviors are coherent for this kind of remote-service skill but mean the agent will read files you provide and may examine its install path and save session IDs; the doc explicitly warns not to print tokens/raw JSON.
✓ 安装机制
Instruction-only skill with no install spec and no code files — lowest install risk. All network interactions are explicit in SKILL.md; nothing is downloaded or executed on the user's machine by an installer.
ℹ 凭证需求
Only NEMO_TOKEN is declared as required (primary credential), which is proportional. However, the SKILL.md frontmatter references a config path (~/.config/nemovideo/) while the registry metadata reported no required config paths — an inconsistency worth clarifying. The skill can also generate an anonymous token itself if NEMO_TOKEN is not set, so it does not strictly require pre-provisioned credentials.
✓ 持久化与权限
always:false and normal autonomous invocation settings. The skill will create and store a session_id (to poll render jobs) and uses bearer tokens for API calls; it does not request elevated system-wide privileges or modify other skills' configuration in the provided instructions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/17
- Initial release of the "Video Object — Track and Export Object Videos" skill. - Upload MP4, MOV, AVI, or WebM videos up to 500MB for automatic object tracking and highlighting. - Describe desired edits (e.g., "track and highlight the moving car") and receive processed results in about 30-90 seconds. - Supports export to MP4 (H.264), MOV, AVI, WebM, and image/audio formats. - No need for manual frame-by-frame editing or installing extra software—everything processed server-side. - Includes credit system for usage, batch editing support, and user session management for iterative workflows.
● 无害
安装命令
点击复制官方npx clawhub@latest install video-object
镜像加速npx clawhub@latest install video-object --registry https://cn.longxiaskill.com 镜像可用