📦 Video Maker Free For Windows — 技能工具
v1.0.0Turn a 2-minute raw screen recording into 1080p polished MP4 videos just by typing what you need. Whether it's editing and exporting videos without installin...
0· 13·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's behavior mostly matches a cloud video-rendering tool, but there are inconsistencies about filesystem/config access and it will upload your videos and obtain tokens automatically — you should review data-exfiltration and config-read behavior before installing.
评估建议
This skill will upload your video files to an external cloud service (mega-api-prod.nemovideo.ai) and use or obtain a NEMO_TOKEN to do so. Before installing or using it: 1) Confirm you are comfortable having your videos sent to that domain and review the provider's privacy/TOS. 2) Prefer setting your own NEMO_TOKEN rather than allowing automatic anonymous-token creation if you want tighter control. 3) Be aware the skill's instructions reference reading install paths and a config directory (~/.co...详细分析 ▾
ℹ 用途与能力
The skill's name and description match the runtime instructions (upload clips, request renders, download MP4). Requiring a single API token (NEMO_TOKEN) is proportional to the stated purpose. However, the SKILL.md frontmatter declares a config path (~/.config/nemovideo/) and runtime logic to detect install paths for X-Skill-Platform; those filesystem interactions are not declared in the registry metadata (registry said no required config paths), which is an inconsistency.
⚠ 指令范围
The instructions direct the agent to: (a) create or use NEMO_TOKEN and call multiple API endpoints on mega-api-prod.nemovideo.ai; (b) upload user files (video clips) to that external service and poll render endpoints; and (c) read the SKILL.md YAML frontmatter and detect install paths to populate X-Skill-Platform header. Uploading user videos to an external domain is expected for this service but is a notable data exfiltration action — the SKILL.md does not explicitly instruct to obtain explicit user consent before uploads. The requirement to detect install path implies reading filesystem locations (e.g., ~/.clawhub/, ~/.cursor/skills/) which is not clearly declared to users.
✓ 安装机制
There is no install spec and no code files; this is an instruction-only skill. That reduces install-time risk because nothing is downloaded or written by the skill itself.
⚠ 凭证需求
The skill only requires a single credential (NEMO_TOKEN), which is appropriate. However, the SKILL.md frontmatter indicates it expects to use a config path (~/.config/nemovideo/) and to detect install directories to set X-Skill-Platform — access to these filesystem locations is not declared in the registry's required config paths. This mismatch between declared requirements and runtime instructions is a proportionality/visibility concern. Also, the skill will automatically request an anonymous token from the API if no token is present, which means it can autonomously obtain credentials without the user providing them explicitly.
✓ 持久化与权限
The skill does not request always: true and is user-invocable only. It doesn't declare or appear to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) and not itself flagged; nothing indicates persistent privileged presence.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
- Initial release of Video Maker Free for Windows. - Upload and edit video clips with simple instructions—no timeline dragging or export settings required. - Cloud-based rendering: turn raw recordings into polished 1080p MP4 videos within 1-2 minutes. - Automatically manages authentication, session creation, and render pipeline. - Supports exports in multiple formats (MP4, MOV, AVI, WEBM, GIF, MP3, and more). - Handles video edits, exports, credit checks, and session state—all from chat prompts.
● 无害
安装命令
点击复制官方npx clawhub@latest install video-maker-free-for-windows
镜像加速npx clawhub@latest install video-maker-free-for-windows --registry https://cn.longxiaskill.com镜像同步中
技能文档
未提供 SKILL.md 内容