Video Ai Free

PassAudited by ClawScan on May 2, 2026.

Overview

This is a coherent cloud video-editing skill, but users should understand that it creates/uses a service token and sends uploaded media to an external rendering backend.

This skill appears purpose-aligned for cloud video editing. Before installing, be comfortable with sending your video files and edit instructions to the NemoVideo backend, protect the NEMO_TOKEN like a password, and consider asking for confirmation before uploads or exports involving sensitive content.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private or unreleased videos uploaded through this skill may be processed by the NemoVideo cloud service.

Why it was flagged

The skill clearly discloses that user media and editing instructions are sent to an external cloud backend for processing.

Skill content
This tool takes your raw video footage and runs AI video editing through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Use it only with media you are comfortable sending to the external provider, and review the provider’s privacy/retention practices if the content is sensitive.

What this means

Anyone with the token could potentially use the associated NemoVideo session or credits until it expires.

Why it was flagged

The skill uses or obtains a bearer token for the video service, which is expected for the integration but is still a credential.

Skill content
Check if `NEMO_TOKEN` is set in the environment... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... The response `data.token` is your NEMO_TOKEN
Recommendation

Keep NEMO_TOKEN private, avoid pasting it into chats or logs, and rotate/remove it when no longer needed.

What this means

Within the editing session, the backend can guide the agent to perform scoped actions such as querying state or exporting the video.

Why it was flagged

The skill tells the agent to translate backend GUI-style instructions into API calls. This is purpose-aligned, but users should know some video-service actions may be executed internally.

Skill content
Backend Response Translation... "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Recommendation

For important projects, ask the agent to confirm before uploads, exports, or credit-consuming edits.

What this means

A render job may continue running in the cloud even if the user closes the tab before completion.

Why it was flagged

The skill maintains a service session and cloud render jobs may continue after the local interaction closes; this is consistent with rendering but is a persistence consideration.

Skill content
Store the returned `session_id` for all subsequent requests... closing the tab before completion orphans the job.
Recommendation

Check job status after starting an export, and avoid starting renders unless you want the cloud job to proceed.