Video Meta
PassAudited by ClawScan on May 10, 2026.
Overview
This is a disclosed cloud video-processing skill, but using it means selected videos, prompts, and session data can be sent to NemoVideo with a NEMO token.
Before installing, make sure you are comfortable sending selected video files and prompts to the NemoVideo cloud service. Use it for media you can share with that provider, keep your NEMO_TOKEN protected, and give precise prompts so the agent performs only the metadata, upload, or export action you intend.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may perform cloud video-processing steps such as editing or export when prompted, not only generate text metadata.
The skill gives the agent a fairly broad cloud API workflow, including SSE-driven actions and video export, which is broader than just returning metadata. The behavior is disclosed and tied to video processing, so this is a notice rather than a concern.
"Everything else (generate, edit, add BGM…) | → §3.1 SSE" and "Export: POST `/api/render/proxy/lambda`"
Use clear prompts and confirm what output you want before asking it to process or export videos.
The provider token authorizes video-processing sessions and may be tied to credits or account access.
The skill uses a provider bearer token, and can obtain an anonymous token if one is not present. This is expected for the NemoVideo cloud backend and the artifact instructs not to expose tokens.
"All requests must include: `Authorization: Bearer <NEMO_TOKEN>`" and "Extract `data.token` from the response — this is your NEMO_TOKEN"
Only use a NEMO_TOKEN you are comfortable delegating to this skill, and rotate or revoke it if you no longer use the integration.
Private or sensitive videos uploaded through the skill may be processed and stored by the external provider according to its own policies.
The skill sends selected video files or URLs to the NemoVideo cloud API. This is purpose-aligned and disclosed, but it means user media leaves the local chat environment.
"This skill connects to a cloud processing backend" and "Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F \"files=@/path\"`, or URL: `{\"urls\":[\"<url>\"],\"source_type\":\"url\"}`"Avoid uploading confidential videos unless you trust the provider and understand its privacy, retention, and deletion practices.