Video Ki Hd
AdvisoryAudited by Static analysis on May 12, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use a NemoVideo token/session to spend or check service credits and run video jobs for the user.
The skill uses a bearer token or creates an anonymous provider token to access the cloud service. This is expected for the integration, but it is still delegated service authority.
Look for `NEMO_TOKEN` in the environment. If found, skip to session creation. Otherwise: ... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token` ... Extract `data.token` from the response
Use a dedicated or low-privilege token where possible, avoid sharing the token, and revoke or rotate it if you no longer use the skill.
Videos you provide may be transmitted to and processed by the NemoVideo cloud service.
User-provided videos or URLs are sent to an external cloud API for processing. This is central to the skill's purpose, but it affects privacy of uploaded media.
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`Only upload videos you are comfortable sending to this provider, especially if they contain private, sensitive, or copyrighted material.
Users have limited artifact-provided information to verify the publisher or service relationship behind the NemoVideo API integration.
The skill has no published source or homepage in the provided metadata. There is no installable code to review, but the provenance of the external integration is not independently documented in the artifacts.
Source: unknown; Homepage: none
Confirm you trust the publisher and the NemoVideo endpoint before uploading important or private videos.
