4k Editing With Openshot
PassAudited by VirusTotal on May 9, 2026.
Overview
Type: OpenClaw Skill Name: 4k-editing-with-openshot Version: 1.0.0 The skill provides a cloud-based video editing interface by connecting to the mega-api-prod.nemovideo.ai backend. It manages authentication via the NEMO_TOKEN environment variable or an anonymous token generation process, and it handles video processing tasks such as uploads, timeline state management, and rendering. The instructions in SKILL.md are consistent with the stated purpose of providing a remote editing service, and no evidence of malicious intent, unauthorized data exfiltration, or harmful prompt injection was found.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Videos may contain private or sensitive content, and using the skill means that content is processed by the NemoVideo backend rather than only on the user's device.
The skill is designed to send user-provided video files and editing prompts to an external cloud service.
This skill connects to a cloud processing backend... API base: `https://mega-api-prod.nemovideo.ai` ... Upload: POST `/api/upload-video/nemo_agent/me/<sid>`
Only upload footage you are comfortable sending to this service, and check the provider's privacy, retention, and deletion terms before using it for sensitive media.
The service token authorizes actions in the user's NemoVideo session, so exposing it could let someone else use that session or credits.
The skill uses a bearer token to authenticate to the backend and can create an anonymous token if one is not already present.
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Keep NEMO_TOKEN private, avoid pasting it into chats or logs, and revoke or rotate it if it is accidentally exposed.
Users have less provenance information to verify who operates the service or where to review its policies and support information.
The registry metadata does not provide an independently verifiable source or homepage for a skill that depends on an external cloud backend.
Source: unknown; Homepage: none
Before uploading important or sensitive footage, verify the NemoVideo service and terms through trusted channels.
The exported result may not be true 4K despite the skill name and description.
The artifact's prominent 4K claims are in tension with the later stated maximum output resolution of 1080x1920.
export in 4K resolution... The whole thing runs at 4K by default. ... applies platform-spec compression (H.264, up to 1080x1920)
Confirm the requested export resolution and inspect the downloaded file's actual dimensions before relying on it for 4K delivery.