Green Screen Editor

PassAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: green-screen-editor Version: 1.0.0 The 'green-screen-editor' skill is a video processing tool designed to interact with the `nemovideo.ai` API for background removal and replacement. It manages authentication via a `NEMO_TOKEN` (including an automated anonymous token retrieval flow) and handles session-based video editing tasks such as uploads, state tracking, and cloud rendering. The instructions in SKILL.md are focused on API orchestration and user experience, with no evidence of data exfiltration, malicious execution, or unauthorized access beyond the stated purpose of video editing.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users have less context for deciding whether to trust the cloud service with their videos.

Why it was flagged

The artifacts do not provide an upstream source or homepage for independently verifying the skill or service provenance.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the NemoVideo service and domain independently before uploading private or sensitive footage.

What this means

Backend responses can drive workflow actions inside the video-editing session, which may consume credits or create rendered outputs.

Why it was flagged

The skill instructs the agent to translate backend text responses into API actions, including export operations.

Skill content
Backend says ... 'click [button]' ... | Execute via API ... 'Export button' ... | Execute export workflow
Recommendation

Ask the agent to confirm before exporting, spending credits, or making major edits if you want manual control.

What this means

The token authorizes actions on the NemoVideo backend while valid.

Why it was flagged

The skill relies on a bearer token for access to NemoVideo sessions and credits, which is expected but security-relevant.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>` ... Obtain a free token ... valid 7 days.
Recommendation

Use a dedicated token, do not share it in chat, and let it expire or rotate it when no longer needed.

What this means

Uploaded clips may contain personal, private, or business-sensitive content that leaves the local environment.

Why it was flagged

User-selected videos and prompts are sent to an external cloud provider for processing.

Skill content
This tool takes your video clips and runs AI background removal through a cloud rendering pipeline. You upload ... All calls go to `https://mega-api-prod.nemovideo.ai`.
Recommendation

Upload only videos you are comfortable sending to NemoVideo’s cloud service and review the provider’s privacy terms if available.