Ai Video Dubbing
PassAudited by ClawScan on May 6, 2026.
Overview
This looks like a purpose-aligned cloud video-dubbing skill, but it sends uploaded videos and prompts to a remote NemoVideo backend and uses a service token.
This skill appears coherent for cloud AI video dubbing and does not include local executable code. Before installing, understand that your videos and prompts will be uploaded to NemoVideo's cloud service, and that the agent will use or create a NEMO_TOKEN to authenticate those requests. Avoid using it for confidential footage unless you trust the provider and its retention/privacy practices.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Private or confidential videos, URLs, and related prompts may leave the user's device and be processed by a third-party cloud service.
The skill sends user video files or video URLs to an external cloud backend for processing.
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`Only upload videos you are allowed to process with this provider, and review the provider's privacy and retention terms before using sensitive content.
The agent can authenticate to the NemoVideo service, create sessions, upload media, check credits, and start render jobs under that token.
The skill uses or creates a service token and sends it as bearer authentication to the NemoVideo API.
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Use a dedicated token for this service, keep it private, and monitor any credits or account activity associated with it.
Users have less information to independently verify who maintains the skill or what service terms apply before sending media to the backend.
The skill does not install code, but the artifacts provide limited provenance information for the skill publisher or remote service.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Verify the provider/domain and service terms before using the skill with sensitive or valuable videos.
A render job may keep running remotely or become difficult to track if the session is closed before completion.
Remote render jobs may continue or remain orphaned after the local interaction ends.
Each export job queues on a cloud GPU node... closing the tab before completion orphans the job.
Let exports finish when possible and avoid starting jobs with sensitive files unless you are comfortable with remote processing.