Video Jiggle

stabilize video clips into stabilized video clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators use it for removing cam...

This skill appears to do what it says (upload your video, run cloud stabilization, return MP4). Before installing, consider: 1) The backend domain (mega-api-prod.nemovideo.ai) is not documented with a public homepage or privacy/terms links — you should confirm you trust that service before uploading private videos. 2) Although it declares NEMO_TOKEN as required, the skill will obtain an anonymous token itself if none is provided; if you want to avoid the skill contacting external endpoints automatically, do not install it or block its network access. 3) The SKILL.md implies the agent may check local install paths (~/.clawhub/, ~/.cursor/) to set headers — if you are uncomfortable with any filesystem inspection, do not install. 4) Prefer supplying your own account token (NEMO_TOKEN) from a known, trusted provider rather than relying on anonymous tokens. 5) Ask the publisher for a homepage, privacy policy, and source code if you need stronger assurance; absence of those increases risk. If you proceed, avoid uploading sensitive or private video content until you verify the service and its data retention policies.

Type: OpenClaw Skill Name: video-jiggle Version: 1.0.0 The skill facilitates video stabilization by uploading local files to a remote API (mega-api-prod.nemovideo.ai) and using a Server-Sent Events (SSE) stream for command processing, which are high-risk capabilities. It also includes instructions for the agent to hide technical details from the user and perform environment fingerprinting by checking its installation path to determine the platform (SKILL.md). While these behaviors are plausibly needed for the stated purpose, the combination of broad file/network access and reduced transparency warrants a suspicious classification.