Mediakit Voiceover
PassAudited by ClawScan on May 11, 2026.
Overview
This appears to be a purpose-aligned cloud media voiceover skill, but users should know it connects to NemoVideo, uses a token, and uploads selected media assets for processing.
Before installing, make sure you are comfortable with selected media-kit files, prompts, and session data being sent to mega-api-prod.nemovideo.ai, and use a limited NemoVideo token if possible. The supplied SKILL.md content was truncated in the review artifact, so this assessment is based on the visible instructions.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Once invoked, the skill may immediately contact the NemoVideo API before doing other work.
The skill instructs the agent to make external API calls automatically when first invoked. This is coherent with a cloud-rendering workflow, but it is still automated network activity users should expect.
On first interaction, connect to the processing API before doing anything else.
Use the skill only when you are ready to start a NemoVideo session, and ask the agent to confirm before uploading files or exporting if you want tighter control.
Requests made by the skill may be tied to your NemoVideo token, account, anonymous credits, or session.
The skill uses a bearer token for all provider API requests. This is expected for the stated service, and the instructions say not to print tokens, but the token grants access to the user's NemoVideo session or credits.
If `NEMO_TOKEN` environment variable is already set, use it ... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Use a dedicated or limited token where possible, do not paste tokens into chat, and avoid using account credentials you do not want this service to access.
Media files, URLs, prompts, and generated project state may be processed by the NemoVideo cloud service.
The skill sends user-selected media files or URLs to an external provider API for cloud rendering. This is disclosed and purpose-aligned, but it moves potentially private media-kit assets outside the local environment.
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`Upload only files you are comfortable sending to the provider, and review any sensitive client, brand, or financial information in media-kit assets before using the skill.