4k Editing With Openshot

AdvisoryAudited by Static analysis on May 9, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Videos may contain private or sensitive content, and using the skill means that content is processed by the NemoVideo backend rather than only on the user's device.

Why it was flagged

The skill is designed to send user-provided video files and editing prompts to an external cloud service.

Skill content
This skill connects to a cloud processing backend... API base: `https://mega-api-prod.nemovideo.ai` ... Upload: POST `/api/upload-video/nemo_agent/me/<sid>`
Recommendation

Only upload footage you are comfortable sending to this service, and check the provider's privacy, retention, and deletion terms before using it for sensitive media.

What this means

The service token authorizes actions in the user's NemoVideo session, so exposing it could let someone else use that session or credits.

Why it was flagged

The skill uses a bearer token to authenticate to the backend and can create an anonymous token if one is not already present.

Skill content
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Keep NEMO_TOKEN private, avoid pasting it into chats or logs, and revoke or rotate it if it is accidentally exposed.

What this means

Users have less provenance information to verify who operates the service or where to review its policies and support information.

Why it was flagged

The registry metadata does not provide an independently verifiable source or homepage for a skill that depends on an external cloud backend.

Skill content
Source: unknown; Homepage: none
Recommendation

Before uploading important or sensitive footage, verify the NemoVideo service and terms through trusted channels.

What this means

The exported result may not be true 4K despite the skill name and description.

Why it was flagged

The artifact's prominent 4K claims are in tension with the later stated maximum output resolution of 1080x1920.

Skill content
export in 4K resolution... The whole thing runs at 4K by default. ... applies platform-spec compression (H.264, up to 1080x1920)
Recommendation

Confirm the requested export resolution and inspect the downloaded file's actual dimensions before relying on it for 4K delivery.