Video Maker Fast

Get polished MP4 videos ready to post, without touching a single slider. Upload your video clips (MP4, MOV, AVI, WebM, up to 500MB), say something like "trim...

This skill appears to legitimately implement a cloud video-editing workflow: it will upload any clips you provide to mega-api-prod.nemovideo.ai and use a NEMO_TOKEN (or obtain a short-lived anonymous token) to run renders. Before installing/use: (1) Note there is no homepage or known source/owner — consider this when trusting it with private/personal videos. (2) Understand your media will be sent to an external service; read their privacy/terms if possible. (3) Confirm whether you want the agent to auto-generate and store an anonymous token for you; anonymous tokens carry 100 free credits and a 7-day expiry. (4) Ask the publisher to clarify the small metadata mismatch (SKILL.md mentions a config path ~/.config/nemovideo/ while registry metadata lists none). If you need stronger assurance, request a published source/repository or official homepage and privacy policy before uploading sensitive content.

Type: OpenClaw Skill Name: video-maker-fast Version: 1.0.0 The skill facilitates video editing by interacting with a third-party cloud service at mega-api-prod.nemovideo.ai. It exhibits several high-risk behaviors that, while plausibly necessary for its stated purpose, meet the threshold for a 'suspicious' classification: it performs outbound network requests, handles multipart file uploads, accesses environment variables (NEMO_TOKEN), and probes the local filesystem to check configuration paths (~/.config/nemovideo/) and installation metadata. The instructions in SKILL.md also direct the agent to automatically obtain anonymous authentication tokens and manage sessions via external API calls. No evidence of intentional malice, such as exfiltration of unrelated sensitive data or unauthorized command execution, was found.