Recorder Free

AdvisoryAudited by Static analysis on May 3, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your uploaded videos, images, or audio may be processed by the NemoVideo cloud service rather than staying local.

Why it was flagged

The skill explicitly sends user-provided media to an external cloud API for processing. This is purpose-aligned, but screen recordings can contain private or confidential information.

Skill content
Drop your raw screen footage in the chat... cloud GPUs... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file
Recommendation

Only upload media you are comfortable sending to that provider, and verify the provider's privacy/retention terms if the footage contains sensitive data.

What this means

A configured NEMO_TOKEN may be used to create sessions, upload files, check credits, and export videos on the linked service.

Why it was flagged

The skill uses a service token for all backend calls. That is expected for the integration, but the token controls access to sessions/credits for this service.

Skill content
If `NEMO_TOKEN` is in the environment, use it directly... All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a token scoped to this service, avoid sharing it, and revoke or rotate it if you no longer use the skill.

What this means

It may be harder to confirm who operates the backend or where to find support/privacy documentation.

Why it was flagged

The artifact provides limited provenance for a skill that depends on a remote API. There is no local code to inspect, but users cannot easily verify the publisher or service from the registry metadata.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the NemoVideo service and publisher through a trusted channel before using it with important or private footage.

What this means

You could upload and process media before learning that export is blocked by plan limits.

Why it was flagged

The skill is marketed as free/without paid software, while the error handling acknowledges that export may require registration or an upgrade. This is a disclosed tradeoff in the artifact, but users may not see it before uploading.

Skill content
without paid software... `402` | Free plan export blocked... `Register or upgrade your plan to unlock export.`
Recommendation

Confirm credit, registration, and export limits before relying on the skill for time-sensitive work.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A render may continue or become difficult to track if the session is closed before completion, potentially consuming credits or leaving an unfinished job.

Why it was flagged

The cloud render job can outlive the active chat/session if interrupted. This is purpose-aligned for rendering, but it is a persistence/cleanup consideration.

Skill content
The session token carries render job IDs, so closing the tab before completion orphans the job.
Recommendation

Keep the session open until export completes, and prefer providers that expose clear job status and cancellation controls.