Ai Video Editor For Captions

PassAudited by ClawScan on May 10, 2026.

Overview

The skill appears to match its advertised purpose, but it sends user-selected media to a NemoVideo cloud backend and uses a provider token/session.

This skill looks reasonable for cloud-based caption generation. Before using it, be aware that it may automatically create a NemoVideo session, use a NEMO_TOKEN, and upload selected media to NemoVideo for processing. Avoid uploading confidential videos or audio unless you trust that provider.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create or resume a NemoVideo session before the user has started an edit.

Why it was flagged

The skill initiates provider API setup automatically on first use. This is disclosed and purpose-aligned, but users should know that opening the skill may contact the backend.

Skill content
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Recommendation

Use the skill only if you are comfortable with automatic setup calls to the NemoVideo service; the skill could improve clarity by asking before first connection.

What this means

The token may grant access to credits, sessions, and render jobs associated with the NemoVideo backend.

Why it was flagged

The skill uses a bearer token for the NemoVideo API and can obtain an anonymous token if one is not already set. This is expected for the service integration, but it is still credentialed provider access.

Skill content
Check if `NEMO_TOKEN` is set in the environment... The response `data.token` is your NEMO_TOKEN... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Recommendation

Use a token intended only for this service, avoid sharing it, and rotate or remove it if you no longer use the skill.

What this means

Videos, images, or audio files selected for editing will be sent to NemoVideo’s backend for processing.

Why it was flagged

User-provided media is uploaded to a third-party cloud API for processing. This is central to the skill’s purpose and is disclosed, but the uploaded files may contain private audio, video, or images.

Skill content
Drop your video clips in the chat... I'll handle the AI caption generation on cloud GPUs... `/api/upload-video/nemo_agent/me/<sid>`
Recommendation

Only upload media you are comfortable sending to this provider, especially if it contains faces, voices, private locations, or confidential content.