📦 Youtube — YouTube
v1.0.0字幕视频 只需输入需求，即可将10分钟YouTube教程视频转为带1080p字幕的YouTube视频。无论是为YouTube视频添加字幕还是...
0· 16·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
high confidence该技能的要求与运行时指令与其声明的目的一致（使用单个 NEMO_TOKEN 调用 nemo 视频处理 API）；SKILL.md 中未要求任何无关凭据或系统级访问权限。
评估建议
This skill appears to do what it says: it uploads videos and drives a remote nemo-video API using a single API token. Before installing or invoking it, consider: (1) Only provide a NEMO_TOKEN you trust — the token grants the remote service access to create and manage render jobs and uploads. If you don't want to set a permanent token, the skill's anonymous-token flow will request a short-lived token from https://mega-api-prod.nemovideo.ai, which still authorizes the service. (2) Don't upload sen...详细分析 ▾
✓ 用途与能力
The skill claims to call a cloud render/subtitle service and only requires a single API token (NEMO_TOKEN). The declared primaryEnv matches the API calls shown in SKILL.md and is proportional to the described functionality.
ℹ 指令范围
Instructions are narrowly focused on session creation, SSE streaming, uploads, state checks, and exports to the nemovideo.ai API. They expect the agent to upload user-provided video files (multipart form or URL) and to POST/GET specific endpoints. Two minor notes: (1) the flow includes an anonymous-token POST to the external endpoint if NEMO_TOKEN is not present (this creates an external call that yields a token); (2) the doc says to auto-detect platform from an install path ('clawhub'/'cursor'/'unknown'), which implies reading an install path or environment to set X-Skill-Platform — that requires the agent to access its runtime/install info but is not otherwise broad data collection.
✓ 安装机制
This is instruction-only with no install spec or downloads, so nothing is written to disk by the skill itself during install.
ℹ 凭证需求
Only NEMO_TOKEN is required (appropriate for calling the nemo API). The frontmatter also mentions a config path (~/.config/nemovideo/) although SKILL.md does not explicitly instruct reading/writing that path; that metadata entry looks unnecessary but not dangerous by itself. The anonymous-token flow produces a short-lived token if you don't provide NEMO_TOKEN.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated platform privileges. It instructs saving a session_id for in-session operations (expected) but does not request modifications to other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
YouTube Subtitle Video — 为 YouTube 视频添加字幕 v1.0.0 - 首发版本：一键为 YouTube 视频添加字幕，导出 1080p MP4、MOV 等格式。 - 极简流程：拖入视频，描述所需字幕或修改，1–2 分钟完成。 - 云端自动处理，附赠免费 token（无需注册，赠送 100 试用额度）。 - 支持多语字幕、多音轨，批量或迭代编辑均高速完成。 - 实时状态、额度查询、时间轴摘要，项目管理一目了然。
● 可疑
安装命令
点击复制官方npx clawhub@latest install youtube-subtitle-video
镜像加速npx clawhub@latest install youtube-subtitle-video --registry https://cn.longxiaskill.com