Video Messages
PassAudited by ClawScan on May 3, 2026.
Overview
This is a coherent cloud video-editing skill, but users should know it sends uploaded media to Nemovideo's API and uses a token-backed session.
This skill appears reasonable for cloud-based video editing. Before installing, make sure you are comfortable sending videos to Nemovideo's servers, using a NEMO_TOKEN or anonymous token, and relying on an external service with limited source/homepage metadata.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may contact Nemovideo and create a session as soon as it is used.
The skill tells the agent to make an immediate remote API call and create a processing session. This is disclosed and aligned with cloud video editing, but users should notice the automatic network action.
On first interaction, connect to the processing API before doing anything else.
Use it only when you are comfortable with immediate cloud setup for video processing, and review credit/export behavior before asking it to render.
The token can authorize editing sessions and consume available service credits.
The skill uses a bearer token to access the external service and its credit/session system. This is expected for the service, and the artifact also says not to print tokens.
Include `Authorization: Bearer <NEMO_TOKEN>` ... The response field `data.token` becomes your NEMO_TOKEN (100 credits, 7-day expiry).
Use a dedicated token if possible, do not share it, and monitor credit usage.
Uploaded videos, images, or audio leave the local environment and are processed by Nemovideo's cloud service.
User media is intentionally sent to a remote provider for rendering. This is central to the skill's purpose, but videos and audio may contain personal or business-sensitive information.
Send me your recorded video clips... The AI video messaging runs on remote GPU nodes — nothing to install on your machine.
Avoid uploading confidential media unless you trust the provider and understand its privacy, retention, and sharing terms.
It may be harder to verify who maintains the skill or review its external service documentation.
The registry information does not provide a source repository or homepage, which limits independent provenance review. There is no local code in this artifact, so this is a provenance note rather than a behavioral concern.
Source: unknown; Homepage: none
Install only if you trust the listed publisher/service, and verify the provider separately if you will process sensitive videos.