Music Free
PassAudited by VirusTotal on May 3, 2026.
Overview
Type: OpenClaw Skill Name: music-free Version: 1.0.0 The skill is a functional wrapper for a cloud-based video editing service (nemovideo.ai). It handles authentication, file uploads, and remote rendering via a documented API (mega-api-prod.nemovideo.ai). The behavior is transparently described in SKILL.md and aligns with the stated purpose of removing background music from videos; there is no evidence of unauthorized data exfiltration, credential theft, or malicious command execution.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can act within the NemoVideo account/session represented by the token, including uploading media, checking credits, creating sessions, and exporting videos.
The skill uses a bearer token for access to the NemoVideo cloud service and can automatically obtain an anonymous token if one is not present. This is expected for the service integration, and the artifact instructs not to expose tokens.
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Include `Authorization: Bearer <NEMO_TOKEN>`
Use a scoped or anonymous token where possible, keep the token private, and revoke or rotate it if you no longer use the skill.
Videos, audio, prompts, and editing state may be processed outside the local machine by NemoVideo’s cloud backend.
The skill sends user-provided video/audio files to a third-party cloud API for processing. This is disclosed and aligned with the stated cloud GPU workflow, but uploaded videos may contain private or sensitive content.
This skill connects to a cloud processing backend... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Only upload media you are comfortable sending to this provider, and review the provider’s privacy, retention, and deletion policies if the content is sensitive.
Some actions in the cloud editing session may happen automatically as the agent follows backend workflow instructions.
The skill tells the agent to convert backend GUI-style instructions into API actions. This is part of the intended video-editing workflow, but it means the backend can guide edits and exports within the current session.
Backend says | You do ... "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Review the final output before publishing or relying on it, and ask the agent to summarize changes before export if you want tighter control.