Motivation Video

PassAudited by ClawScan on May 5, 2026.

Overview

This appears to be a purpose-aligned cloud video rendering skill, but it sends your clips and prompts to NemoVideo and uses or creates a service token.

This skill looks coherent for cloud-based motivational video creation. Before installing or using it, make sure you are comfortable sending your clips, prompts, and render jobs to NemoVideo, protect the NEMO_TOKEN, and start with non-sensitive media if you cannot verify the provider or retention practices.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Personal or confidential videos shared with the skill may be uploaded to NemoVideo's servers for processing.

Why it was flagged

The skill explicitly relies on a third-party cloud service for rendering, so user clips and prompts may leave the local environment.

Skill content
This skill connects to a cloud processing backend... All rendering happens server-side.
Recommendation

Use only content you are comfortable sending to a third-party cloud service, and review the provider's privacy/retention terms if the clips are sensitive.

What this means

The token can authorize requests to the video service and may be tied to credits or account activity.

Why it was flagged

The skill uses a bearer token, and can create an anonymous service token if one is not already present.

Skill content
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Keep NEMO_TOKEN private, avoid pasting it into chats or logs, and rotate or remove it if it may have been exposed.

What this means

Using the skill may immediately contact the external service and create a session/token as part of normal operation.

Why it was flagged

The agent is instructed to automatically initialize the remote API session after the skill is used, rather than requiring a separate manual setup step.

Skill content
On first use, set up the connection automatically and let the user know ("Connecting...").
Recommendation

If you need strict control over network activity, invoke the skill only when you are ready to connect to NemoVideo.

What this means

Users have less public context for verifying who maintains the skill or the referenced backend integration.

Why it was flagged

The registry metadata does not provide a source repository or homepage for independent provenance review.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer testing with non-sensitive media first and verify the provider out-of-band before relying on it for private or business content.