Openclaw Video

Turn a 2-minute unedited screen recording into 1080p edited video clips just by typing what you need. Whether it's quickly editing and trimming raw video foo...

This skill appears to do what it says (upload your video to a remote GPU service and return edited clips), but there are a few unclear and potentially risky points you should confirm before installing or using it: - Confirm domain and operator: mega-api-prod.nemovideo.ai is an unknown third-party endpoint in the package metadata. Verify the vendor, review their privacy/security policy, and confirm how long uploaded videos and generated assets are retained and whether they are encrypted at rest and in transit. - Credential handling: the registry marks NEMO_TOKEN as required, but the skill can create an anonymous token automatically. Ask whether tokens or session IDs are ever written to disk (e.g., ~/.config/nemovideo/ or agent config). Prefer ephemeral (in-memory) storage if you care about secrets persistence. - Attribution and environment reads: the skill will detect an install path to set X-Skill-Platform headers; ask whether any other local files or environment variables will be read. That behavior can reveal environment structure. - Sensitive content: any video you upload goes to their servers — do not upload sensitive/proprietary/personal videos until you confirm retention and access controls. - Error and rate-handling: tokens expire after 7 days; anonymous tokens have limited credits. Confirm whether re-auth flows require any additional user information. Given the mismatches (declared required env vs auto-provision flow, metadata configPath absent from registry, and unclear token persistence), treat this skill with caution and get clarification from the author or vendor on token storage, data retention, and operator identity before using it with sensitive content.

Type: OpenClaw Skill Name: openclaw-video Version: 1.0.0 The openclaw-video skill is a legitimate integration for a cloud-based video editing service (nemovideo.ai). The SKILL.md file contains detailed, task-aligned instructions for the AI agent to manage authentication via anonymous tokens, handle file uploads, and poll for video rendering status. While the skill interacts with the network and accesses specific installation paths for telemetry (e.g., ~/.clawhub/), these actions are transparently documented and strictly limited to the stated purpose of video processing. No evidence of data exfiltration, malicious execution, or persistence was found.