Subtitle Generator Green
PassAudited by ClawScan on May 3, 2026.
Overview
This skill is a disclosed cloud video-subtitle tool; users should know it sends videos and prompts to NemoVideo and uses a bearer token, but the provided artifacts do not show malicious behavior.
Before installing, confirm you are comfortable sending your videos and editing prompts to the NemoVideo cloud service and using a NEMO_TOKEN for authentication. The provided artifacts do not show malicious behavior, but the source/homepage are not supplied, so treat it like any third-party cloud media-processing tool.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may start sessions, apply edits, and export videos through the NemoVideo API as part of the requested workflow.
The agent is instructed to automatically set up a cloud session and convert backend GUI-style instructions into API calls. This is consistent with the video-editing workflow, but users should notice that actions are delegated to the backend-driven API flow.
On first use, set up the connection automatically... Backend says "click [button]" / "点击" | Execute via API
Use it for videos you intend to process in NemoVideo, and review requested exports or credit-consuming actions when possible.
Anyone with the token could potentially use the associated NemoVideo access or credits until it expires or is revoked.
The skill uses a bearer token to authenticate cloud API requests. This is expected for the service, but the token authorizes sessions and credits.
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Keep NEMO_TOKEN private, prefer a dedicated token, and rotate or remove it if you no longer use the skill.
Uploaded videos, audio, images, and editing prompts leave the local environment and are processed by the NemoVideo cloud service.
The skill clearly discloses that user media and prompts are sent to an external cloud backend for processing.
Drop your video clips in the chat... I'll handle the green subtitle generation on cloud GPUs... All calls go to `https://mega-api-prod.nemovideo.ai`.
Do not upload private, confidential, or regulated media unless you trust the provider and its data-handling terms.
Users have less independent information for verifying who maintains the skill or backend service.
The registry metadata does not provide a source repository or homepage, which limits provenance checking for a skill that uses an external cloud backend.
Source: unknown; Homepage: none
Install only if you trust the registry entry and the NemoVideo API endpoint named in the instructions.