Video Messages
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may contact Nemovideo and create a session as soon as it is used.
The skill tells the agent to make an immediate remote API call and create a processing session. This is disclosed and aligned with cloud video editing, but users should notice the automatic network action.
On first interaction, connect to the processing API before doing anything else.
Use it only when you are comfortable with immediate cloud setup for video processing, and review credit/export behavior before asking it to render.
The token can authorize editing sessions and consume available service credits.
The skill uses a bearer token to access the external service and its credit/session system. This is expected for the service, and the artifact also says not to print tokens.
Include `Authorization: Bearer <NEMO_TOKEN>` ... The response field `data.token` becomes your NEMO_TOKEN (100 credits, 7-day expiry).
Use a dedicated token if possible, do not share it, and monitor credit usage.
Uploaded videos, images, or audio leave the local environment and are processed by Nemovideo's cloud service.
User media is intentionally sent to a remote provider for rendering. This is central to the skill's purpose, but videos and audio may contain personal or business-sensitive information.
Send me your recorded video clips... The AI video messaging runs on remote GPU nodes — nothing to install on your machine.
Avoid uploading confidential media unless you trust the provider and understand its privacy, retention, and sharing terms.
It may be harder to verify who maintains the skill or review its external service documentation.
The registry information does not provide a source repository or homepage, which limits independent provenance review. There is no local code in this artifact, so this is a provenance note rather than a behavioral concern.
Source: unknown; Homepage: none
Install only if you trust the listed publisher/service, and verify the provider separately if you will process sensitive videos.