Video Editing With Gopro

Turn a 3-minute GoPro hiking clip in MP4 into 4K edited action clips just by typing what you need. Whether it's trimming and polishing GoPro action footage f...

This skill appears to be a wrapper around a remote video-processing API (nemovideo). Before installing: (1) Confirm you trust the external domain (https://mega-api-prod.nemovideo.ai) and its privacy/terms — your raw video will be uploaded to that service. (2) Ask the author or vendor to resolve contradictions: the skill advertises 4K output but the pipeline text says up to 1080x1920. (3) Clarify where and how tokens/session IDs are stored (in memory vs written to ~/.config/nemovideo/) and whether anonymous tokens created automatically will be persisted. (4) If you have sensitive footage, do not use the skill until you confirm retention, access controls, and deletion policies for uploaded videos. (5) If you want stronger assurance, request the skill author to remove install-path probing for X-Skill-Platform (or document exactly what is read) and to make token-creation explicit (ask for user consent) rather than automatic.

Type: OpenClaw Skill Name: video-editing-with-gopro Version: 1.0.0 The skill facilitates cloud-based video editing by connecting to a third-party API (mega-api-prod.nemovideo.ai). It instructs the agent to automatically provision anonymous authentication tokens, upload user-provided video files to remote servers, and perform environment fingerprinting by detecting its installation path (e.g., ~/.cursor/skills/) for platform attribution. While these capabilities are aligned with the stated purpose of the skill, the combination of outbound network communication, file exfiltration to a third-party service, and local directory discovery constitutes high-risk behavior under the provided security criteria. No clear evidence of intentional malice or unauthorized theft of sensitive credentials (like SSH or AWS keys) was found in SKILL.md or _meta.json.