by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and instructions are coherent with a cloud-based video-editing service: it legitimately needs a NEMO_TOKEN and to upload user media to the listed API endpoints to perform edits and exports.
评估建议
This skill is internally consistent for a cloud video-editing agent, but it will upload any media you drop into the chat to an external service (mega-api-prod.nemovideo.ai). Before installing or using it: (1) verify you trust the nemo/nemovideo service and its privacy/retention policy; (2) avoid uploading sensitive video/audio; (3) if you have a long-lived NEMO_TOKEN in your environment you should only provide a token scoped for this use (or remove it and let the skill obtain an anonymous starte...详细分析 ▾
✓ 用途与能力
Name/description (cloud AI video editing) align with required env var (NEMO_TOKEN), declared config path (~/.config/nemovideo/), and the SKILL.md which documents uploading media, session creation, render jobs and exports to a nemovideo API.
ℹ 指令范围
Instructions direct the agent to upload user media and perform API calls (session creation, SSE chat, upload, export and polling). This is expected for the stated purpose, but note the skill will transmit user-provided video/audio to the external domain (mega-api-prod.nemovideo.ai) and will attempt to create an anonymous token if no NEMO_TOKEN is present.
✓ 安装机制
No install spec or code is included (instruction-only), so nothing is written to disk by an installer — lowest risk for install-time code execution.
ℹ 凭证需求
Only a single credential (NEMO_TOKEN) is required and declared, which is proportionate to a cloud API. The skill will use an existing NEMO_TOKEN from the environment or obtain an anonymous token via the public auth endpoint; if a real token exists in the environment it will be used for all requests, so users should ensure the token scope is appropriate.
✓ 持久化与权限
Skill is not always-on and is user-invocable; it does not request elevated platform privileges. It does reference detecting install path to set an attribution header (X-Skill-Platform), which requires reading expected install locations but is within scope for attribution.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/17
Initial release — free, fast, no-install video editing for TikTok creators. - Upload MP4, MOV, AVI, or WebM footage up to 500MB and describe your edit (e.g., "trim, add background music, export video"). - AI edits, renders, and exports polished 1080p MP4s, ready to download within 1–2 minutes per clip. - No software or skills required; just drop your file and tell the app what you want. - Anonymous users get 100 free credits valid for 7 days; session and credits managed automatically. - Supports batch uploads, iterative editing, and common editing actions (trim, add music, export). - Automated error handling for uploads, token management, and export limits.
● Pending
安装命令
点击复制官方npx clawhub@latest install video-making-free-app
镜像加速npx clawhub@latest install video-making-free-app --registry https://cn.longxiaskill.com镜像同步中