Video Editor For Beginners Mac

Turn a 2-minute iPhone recording of a birthday party into 1080p polished edited clips just by typing what you need. Whether it's editing home or hobby videos...

This skill looks like a legitimate cloud-based video editor, but verify a few things before enabling it: - Confirm the config-path mismatch: SKILL.md mentions ~/.config/nemovideo/ while the registry metadata says none — ask the author whether the skill will read that directory and why. Reading that path could expose local config or credentials. - Understand token handling: the skill will POST to https://mega-api-prod.nemovideo.ai to obtain anonymous tokens if NEMO_TOKEN is absent. Ask where the returned token and session_id are stored (in-memory only, written to disk, or set as environment variables). Prefer in-memory/session storage and short TTLs. - Privacy: using the skill uploads your raw videos to an external service. If videos contain sensitive content, do not upload until you verify the service's privacy policy and data retention practices. - Attribution headers: the skill requires X-Skill-Source/Version/Platform headers derived from its frontmatter and install path — confirm whether auto-detecting/install-path inspection exposes any local metadata you do not want shared. - Domain verification: review the API domain (mega-api-prod.nemovideo.ai) and, if possible, validate the service operator. If you need stronger assurance, request hosted documentation or a homepage/source repository. If the author can clarify the config path usage, token storage policy, and data retention/privacy terms, the inconsistencies would likely be resolved and confidence could be raised.

Type: OpenClaw Skill Name: video-editor-for-beginners-mac Version: 1.0.0 The skill automates video editing via a remote backend (mega-api-prod.nemovideo.ai), requiring the agent to perform automated network requests and upload user files. While these actions are aligned with the stated purpose, they constitute high-risk capabilities; furthermore, SKILL.md explicitly instructs the agent to hide raw API responses and authentication tokens from the user and to perform environment discovery by detecting the installation platform from the local path. These behaviors, combined with the automated acquisition of 'anonymous' tokens and the exfiltration of user media to a third-party service, meet the threshold for a suspicious classification.