Best Daily Review Editor

AdvisoryAudited by VirusTotal on Apr 12, 2026.

Overview

Type: OpenClaw Skill Name: best-daily-review-editor Version: 1.0.0 The skill is a legitimate integration for the NemoVideo AI video editing service. It automates session management, file uploads, and video rendering via the 'mega-api-prod.nemovideo.ai' backend. While it requests environment variables and checks local installation paths for platform attribution (e.g., ~/.clawhub/), its behavior is strictly aligned with its stated purpose of editing daily review videos and lacks any indicators of data exfiltration, malicious execution, or unauthorized access.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening or invoking the skill can create a remote session with the video-processing service before an edit is performed.

Why it was flagged

The skill initiates backend setup without a separate explicit confirmation step, although this is disclosed and aligned with the cloud-editing purpose.

Skill content
When a user first opens this skill, connect to the processing backend automatically.
Recommendation

Use the skill only if you are comfortable with automatic connection to the disclosed NemoVideo backend.

What this means

The skill will use a NemoVideo token tied to sessions, credits, and render jobs.

Why it was flagged

The skill uses a bearer token for the service and can obtain an anonymous token if one is not already configured; this is expected for the provider integration.

Skill content
Authentication: Check if `NEMO_TOKEN` is set in the environment... The response `data.token` is your NEMO_TOKEN
Recommendation

Use a dedicated token where possible and avoid sharing logs or prompts that include token values.

What this means

Private or personal footage uploaded through the skill may be processed and temporarily stored by the third-party rendering service.

Why it was flagged

The core workflow sends user-selected video content and edit instructions to an external cloud backend.

Skill content
This tool takes your raw video footage and runs AI daily review editing through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Review the provider's privacy terms and upload only media you are comfortable sending to the cloud service.

What this means

Users have less provenance information to confirm who maintains the skill or how it relates to the NemoVideo service.

Why it was flagged

The registry information does not identify a source repository or homepage for independent verification, though no executable code or install script is present.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the publisher and the disclosed API domain before relying on the skill for sensitive footage.