Ai Video Editor Hugging Face

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:39 PM UTC
• Version:
  1.0.0

Overview

This is a cloud video-editing skill that sends user-provided media and prompts to Nemo Video, which fits its purpose but deserves privacy caution.

Install only if you are comfortable sending your videos, prompts, and render metadata to Nemo Video cloud services. Avoid confidential, regulated, or private footage unless you trust the provider's privacy and retention practices, and prefer explicit confirmation before uploads or exports.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The skill instructs users to upload raw video footage and send editing prompts to a third-party cloud API, but it does not provide a clear, prominent warning at the point of use that media and prompt content leave the local environment for external processing. This creates a real privacy and data-handling risk, especially because uploaded videos may contain faces, voices, screens, documents, or other sensitive personal or business information.

VirusTotal

66/66 vendors flagged this skill as clean.