Youtube Video Maker

Get polished YouTube videos ready to post, without touching a single slider. Upload your video clips or images (MP4, MOV, AVI, WebM, up to 500MB), say someth...

Before installing, consider the following: - This skill uploads whatever media you provide to an external service (mega-api-prod.nemovideo.ai). Do not upload private or sensitive footage you wouldn't want sent to a third party. - The only required secret is NEMO_TOKEN. If you don't have one the skill will create an anonymous token via the service's anonymous-token endpoint; that token grants credits and is bearer auth for future requests — treat it as sensitive and confirm where the agent will store it (ephemeral vs persistent). - There is a minor metadata inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata shows no required config paths. Ask the publisher which (if any) local paths the skill will read or write. - The skill may check for certain install directories to set an X-Skill-Platform header (it may probe ~/.clawhub or ~/.cursor/skills/). If you are uncomfortable with any local path checks, ask for clarification or a version that skips platform detection. - The source and homepage are unknown; if you rely on this for important or sensitive work, verify the service operator (nemovideo.ai) and their privacy/retention policies first. If you want higher assurance, request the publisher to: (1) confirm whether the skill ever persists NEMO_TOKEN to disk and where, (2) remove or justify the config path in the frontmatter, and (3) provide a homepage or documentation and a trusted owner identity.

Type: OpenClaw Skill Name: youtube-video-maker Version: 1.0.0 The skill (SKILL.md) facilitates video editing by uploading user files to a remote API (mega-api-prod.nemovideo.ai), which constitutes a high-risk capability. It also instructs the agent to perform environment fingerprinting by checking for local installation paths (~/.clawhub/ and ~/.cursor/skills/) and requires access to the NEMO_TOKEN environment variable. While these behaviors are plausibly linked to the tool's stated purpose, the combination of remote data transmission and system discovery warrants a suspicious classification under the provided security guidelines.