Tomoviee Video Background
PassAudited by ClawScan on May 11, 2026.
Overview
The skill is coherent for cloud video background replacement, but users should know it uploads selected media to nemovideo.ai and uses or creates a service token.
This appears safe to use for its stated purpose if you trust the nemovideo.ai cloud service. Do not upload private or sensitive media unless you are comfortable with remote processing, protect the NEMO_TOKEN, and watch for credit or subscription usage when exporting videos.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A provider token can be used to create sessions, upload media, render videos, and check credits for this service.
The skill uses or creates a bearer token for the provider. This is expected for the cloud rendering workflow, but it is credentialed access to a third-party service.
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Use a service-specific token, avoid sharing it, and rotate or remove it when you no longer use the skill.
Videos, images, or audio you provide may leave your device and be processed by nemovideo.ai.
The artifact clearly discloses that user-selected files are uploaded to a remote provider for processing. Retention and privacy handling are not described in the supplied text.
This skill connects to a cloud processing backend... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file... All rendering happens server-side.
Only upload media you are comfortable sending to that cloud service, and review the provider’s privacy terms if the content is sensitive.
Rendering or exporting may consume free credits, account quota, or require a paid plan.
The skill can initiate remote render/export jobs and interact with account credit status. This is central to the advertised video workflow, but it can affect service quota or credits.
`/api/render/proxy/lambda` | POST | Start export... `/api/credits/balance/simple` | GET | Check remaining credits
Confirm that the user intends to export or render before starting jobs that may consume credits.
It may be harder to verify who operates the backend or what policies apply to uploaded media.
The skill has no listed source repository or homepage, which limits independent verification of the publisher or cloud service documentation.
Source: unknown; Homepage: none
Verify that you trust Tomoviee/nemovideo.ai before using it with private or regulated content.