Video Editing With Macbook

edit video clips into polished edited clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. Mac users and content creators use it for edit...

This skill appears to do what it says: it uploads your video files to a third-party API (mega-api-prod.nemovideo.ai) for cloud GPU editing and returns a downloadable MP4. Before installing/using it, consider: 1) Privacy — you will be uploading the raw video to an external service; avoid sending sensitive footage unless you trust the provider and have read their terms/privacy policy. 2) Secrets — if you set NEMO_TOKEN in your environment, keep it secret; the skill also supports generating a short-lived anonymous token if you prefer not to provide your own. 3) Verify endpoints — the skill points at mega-api-prod.nemovideo.ai; confirm that domain and service are legitimate if you rely on compliance guarantees. 4) Note the small metadata mismatch about a config path in the SKILL.md frontmatter versus registry metadata — likely benign (self-attribution) but worth awareness. If any of these points worry you, avoid providing private videos or a long-lived token and prefer the anonymous token flow.

Type: OpenClaw Skill Name: video-editing-with-macbook Version: 1.0.0 The skill facilitates video editing by interacting with an external API (mega-api-prod.nemovideo.ai). It contains several risky patterns: it instructs the agent to probe the local filesystem for specific installation paths (~/.clawhub/ or ~/.cursor/skills/) to set attribution headers and provides broad instructions for uploading local files to the third-party API using multipart form syntax (@/path) in SKILL.md. While these capabilities are aligned with the stated purpose, the lack of explicit path validation or file-type enforcement instructions for the agent creates a potential vector for data exfiltration of sensitive local files to the external domain.