📝 Video Transcript Generator Free Online — 技能工具
v1.0.0convert video files into text transcript file with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. students, content creators, journalists use...
0· 8·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's declared purpose (transcribing videos via a cloud backend) matches most of its runtime instructions, but there are several inconsistencies and ambiguous behaviors (automatic anonymous token creation, hidden token handling, and unclear storage of session data/config) that warrant caution before installing.
评估建议
Before installing, consider these points: (1) This skill will communicate with mega-api-prod.nemovideo.ai and can create an anonymous API token automatically when first opened — ask the author to require explicit user consent before creating or using tokens. (2) Clarify where the skill stores session IDs and tokens (in-memory vs a file under ~/.config/nemovideo/). Persistent storage of tokens should be explicit and opt-in. (3) The SKILL.md tells the agent not to show raw API responses or token v...详细分析 ▾
ℹ 用途与能力
Requiring a single backend credential (NEMO_TOKEN) is coherent with a cloud-based video processing service. However, the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata shows no required config paths — this mismatch is an unexplained inconsistency.
⚠ 指令范围
The instructions direct the agent to automatically create an anonymous token (POST to mega-api-prod.nemovideo.ai) when NEMO_TOKEN is not present, and to 'connect ... automatically' on first open. They also instruct the agent not to display raw API responses or token values to the user. Automatic network calls and hidden handling of credentials without explicit user consent broaden the skill's scope beyond a simple 'upload-and-transcribe' helper and reduce transparency about what is transmitted.
✓ 安装机制
No install spec or code files are present; the skill is instruction-only and therefore does not write new code to disk or pull executables. This is the lowest-risk install mechanism.
ℹ 凭证需求
Only NEMO_TOKEN is declared as required, which is proportionate for a service-backed transcription tool. However, SKILL.md implies use of a config directory and persistent session storage without those config paths being declared in the registry metadata. Also, the instruction to suppress showing the token to users means the skill will manage secrets without clear visibility or explicit permission.
⚠ 持久化与权限
The skill instructs storing a session_id and treats the returned anonymous token as NEMO_TOKEN (valid 7 days). It does not specify where session/token data should be stored (memory vs disk). The frontmatter includes a config path that suggests persistent storage (~/.config/nemovideo/), but the registry metadata omitted this. The combination of automatic token creation, hidden token handling, and ambiguous persistence is a privacy/persistence concern.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/17
Version 1.0.0 — Initial release. - Launches a free online tool to generate text transcripts from video files (MP4, MOV, AVI, WebM up to 500MB). - Automatic AI transcript generation takes just 30-90 seconds on cloud GPUs. - Supports easy file upload, 1080p export, and session-based editing workflows. - Offers anonymous sign-in with 100 free credits (valid 7 days); setup is fast and simple. - Includes clear error handling, guided workflows, and detailed API documentation for reliable video-to-text conversion.
● 无害
安装命令
点击复制官方npx clawhub@latest install video-transcript-generator-free-online
镜像加速npx clawhub@latest install video-transcript-generator-free-online --registry https://cn.longxiaskill.com