Easy Auto Caption — 自动视频字幕工具
v1.0.0基于云端的自动视频字幕工具，支持上传 MP4、MOV、AVI、WebM 文件（最大 500MB），自动生成字幕。适用于 YouTubers 和社交媒体创作者快速添加多语言字幕。
0· 26·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidence该技能主要与云端字幕工具相符，但其声明的要求和运行指令在重要方面存在不匹配。它在主机上读写令牌/会话状态并检查安装路径——这种行为在某种程度上合理，但不完全由元数据证明。
评估建议
["安装或启用技能前，请注意：","(1) 了解视频和元数据将上传到第三方域（mega-api-prod.nemovideo.ai）。如果您的视频包含敏感数据，请勿上传。","(2) 如果不提供 NEMO_TOKEN，技能将尝试获取和持久化匿名令牌/会话。请询问令牌/会话 ID 存储的确切位置（清单提到 ~/.config/nemovideo/）以及是否其他进程可读取这些文件。","(3) 清单错误地将 NEMO_TOKEN 标记为必需，而技能可以自行提供令牌——请要求维护者澄清预期的部署（您是否需要提供自己的令牌？）。","(4) 技能读取安装/配置路径以设置归属标头——确认您对这种本地文件系统访问感到舒适。","(5) 优先选择具有发布源、主页/隐私政策或已记录的上传媒体保留/擦除行为的技能。如果您仍然想尝试它，请考虑提供自己的账户令牌（不使用匿名流）并避免上传敏感视频，直到您验证服务和存储/保留策略。"]...详细分析 ▾
ℹ 用途与能力
The skill's name/description (auto-captioning) aligns with the API endpoints and actions in SKILL.md. Requiring a single service token (NEMO_TOKEN) is appropriate for a cloud service. However, metadata declares NEMO_TOKEN as a required env var while the runtime instructions explicitly implement an anonymous-token flow when the env var is absent — this is an inconsistency (the skill does not strictly need a pre-set NEMO_TOKEN). The metadata also lists a config path (~/.config/nemovideo/) and the instructions mention storing session/token there, which is plausible but not explained in the manifest.
⚠ 指令范围
SKILL.md directs the agent to: detect/install-paths to set X-Skill-Platform (reading user paths), POST to external API endpoints to obtain/store tokens and create sessions, upload user files (multipart uploads or URL), poll render jobs, and persist token/session state. These actions are necessary to use the cloud service, but they require the agent to access local filesystem paths and to persist credentials. The documentation also instructs 'don't display raw API responses or token values', indicating secrets are handled and stored — this is a scope extension beyond mere captioning that users should be aware of.
✓ 安装机制
There is no install spec and no code files — the skill is instruction-only, so nothing is written to disk by an install step. Runtime actions may persist tokens/session state, but there is no automated install that pulls remote code.
⚠ 凭证需求
Only one credential is requested (NEMO_TOKEN), which is proportionate for a cloud captioning service. However, marking NEMO_TOKEN as required while providing an anonymous-token issuance flow is inconsistent. The skill also indicates use of a config path (~/.config/nemovideo/) for storing tokens/session IDs and inspects install directories to set X-Skill-Platform — these are additional host accesses not made explicit in requires.env and may involve persisting secrets to disk.
ℹ 持久化与权限
always:false and autonomous invocation are normal. The runtime instructions intend to persist an anonymous token and session_id (and possibly write to ~/.config/nemovideo/). That is not inherently malicious, but it is persistent credential storage and the skill will create and reuse credentials unless you clear them. The skill does not request system-wide privileges or modify other skills.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/11
Easy Auto Caption 1.0.0 — 初始发布 - 启动基于云端的自动视频字幕生成和字幕工具。 - 支持上传 MP4、MOV、AVI 和 WebM 文件（最大 500MB），输出 1080p MP4 文件（30-60 秒内）。 - 设计用于 YouTubers 和社交媒体创作者快速添加多语言字幕。 - 包括新用户的引导式入门和自动会话/令牌处理。 - 提供快速编辑、批量处理和带有时间线预览的迭代精细化工作流程。 - 上传、渲染和导出步骤中具有强大的错误处理和清晰的用户反馈。
● 无害
安装命令 点击复制
官方npx clawhub@latest install easy-auto-caption
镜像加速npx clawhub@latest install easy-auto-caption --registry https://cn.clawhub-mirror.com
技能文档
基于云端的自动视频字幕工具，支持上传 MP4、MOV、AVI、WebM 文件（最大 500MB），自动生成字幕。适用于 YouTubers 和社交媒体创作者快速添加多语言字幕。
特性
- 支持多格式视频上传
- 自动字幕生成
- 适用于社交媒体和 YouTube 创作者
使用指南
- 上传视频文件
- 选择语言和字幕设置
- 自动生成字幕并下载
注意：请参考安全评估和建议，了解数据上传和存储策略。
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制