Ai No Limits

PassAudited by ClawScan on May 11, 2026.

Overview

This skill appears to do what it says—use a third-party cloud video editor—but uploaded media, edit prompts, and an API token go to nemovideo.ai.

Before installing, confirm you are comfortable with an unknown-source, instruction-only skill contacting nemovideo.ai, creating a session/token, and uploading selected media to a cloud renderer. Keep NEMO_TOKEN secret and avoid uploading private or sensitive videos unless you trust the provider.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less independent information to verify who operates or maintains the skill.

Why it was flagged

The skill is instruction-only and has no local code, but its publisher/provenance information is limited.

Skill content
Source: unknown; Homepage: none
Recommendation

Install only if you are comfortable trusting the listed registry owner and the nemovideo.ai service endpoint.

What this means

Anyone with the token may be able to access or act within the associated NemoVideo session or credits.

Why it was flagged

The skill uses a bearer token for the NemoVideo API; this is expected for the service but is still credentialed access.

Skill content
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Keep NEMO_TOKEN private, rotate or remove it if no longer needed, and avoid pasting token values into chats or logs.

What this means

Opening or invoking the skill may create a backend session before you upload a file.

Why it was flagged

The agent is instructed to initiate backend setup automatically, which is disclosed and purpose-aligned but still causes network activity without a separate confirmation step.

Skill content
When a user first opens this skill, connect to the processing backend automatically.
Recommendation

Use the skill only when you are ready for it to contact nemovideo.ai, and review the service before providing media.

What this means

Videos, images, audio, URLs, and edit prompts may leave your device and be processed by the provider.

Why it was flagged

The skill sends selected local files or URLs to an external cloud provider for processing.

Skill content
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Upload only media you are comfortable sending to a third-party cloud service, especially if it contains private people, locations, or business content.

What this means

A render may continue server-side or become hard to recover if you close the session mid-job.

Why it was flagged

The artifacts describe cloud render jobs tied to session IDs that may continue or remain orphaned after the user interface closes.

Skill content
closing the tab before completion orphans the job
Recommendation

Wait for exports to finish when possible and monitor credits or job status if a render is interrupted.