Ai Video Converter
Security checks across malware telemetry and agentic risk
Overview
The skill's declared purpose (cloud video conversion) matches its instructions and required credential (NEMO_TOKEN); no install steps or unrelated secrets are requested, though there are minor metadata inconsistencies and you should review trust/privacy of the remote service before uploading videos.
This skill appears to do exactly what it says: upload videos to a nemovideo.ai backend to convert formats. Before installing, consider: (1) You will send video files to an external service — check privacy and whether uploading sensitive video is acceptable. (2) The skill uses or stores a NEMO_TOKEN (it can generate a 7-day anonymous token if you don't set one); if you prefer control, supply a disposable token or review the service's account settings. (3) Clarify the config path mention (~/.config/nemovideo/) — confirm whether the agent will read/write files there. (4) Verify you trust the domain mega-api-prod.nemovideo.ai and the operator before sending proprietary content. If any of these are unacceptable, do not install or supply a token.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
