Video Editor Kids

Turn a 2-minute school project recording into 1080p kid-friendly edited videos just by typing what you need. Whether it's editing children's videos with fun...

This skill appears to do what it says (cloud-based kids' video editing) and only asks for one service token (NEMO_TOKEN), which is reasonable — but there are a few things to check before installing or granting access: - Ask the publisher to clarify why the frontmatter lists ~/.config/nemovideo/ as a config path when the registry metadata shows none. If the skill will read that directory, verify what it contains (tokens, cached files) and whether you're comfortable exposing it. - Prefer providing a limited-scope NEMO_TOKEN or a throwaway account/token with the minimum necessary rights, not a high-privilege or shared secret. - Confirm whether the agent will persist the anonymous starter token to disk (and where) if it generates one; if so, decide whether that storage location and lifetime are acceptable. - If you want to reduce risk, run the skill in an isolated environment (separate user account or container) so its filesystem checks (install-path detection, config dir reads) cannot access unrelated credentials or sensitive files. - If the author cannot justify reading install paths or the config directory, treat that as a red flag and avoid installing until clarified. If you want, I can draft specific questions to ask the skill author or propose an isolation checklist to run the skill safely.

Type: OpenClaw Skill Name: video-editor-kids Version: 1.0.0 The skill acts as a functional wrapper for a cloud-based video editing service (nemovideo.ai). It provides detailed instructions for the agent to manage authentication, sessions, file uploads, and rendering via the `https://mega-api-prod.nemovideo.ai` API. While it involves sending user-provided video data to a third-party service and requires an API token (NEMO_TOKEN), these actions are strictly aligned with its stated purpose of providing cloud-based video processing. No evidence of malicious intent, data exfiltration of sensitive local files, or unauthorized execution was found in SKILL.md or _meta.json.