Trimmer High Quality

ReviewAudited by ClawScan on Apr 30, 2026.

Overview

This appears to be a cloud video-trimming skill, but it uploads your footage to NemoVideo and uses a service token/session to process and export clips.

Install or use this skill only if you are comfortable uploading the selected footage to NemoVideo's cloud service and using a NEMO_TOKEN or anonymous starter token. For private or sensitive videos, ask where data is sent and avoid starting exports you do not want processed.

Findings (9)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Backend responses may guide editing or export steps on the user's video session.

Why it was flagged

The skill instructs the agent to translate backend GUI-style messages into API actions. This is aligned with the remote editor workflow, but it means backend text can steer subsequent agent actions.

Skill content
| "click [button]" / "点击" | Execute via API |
Recommendation

Use the skill for intended video-editing tasks and review requested uploads/exports if the outcome seems unexpected.

What this means

Your video files may be uploaded and rendered by the external service.

Why it was flagged

The skill uses remote API actions to upload files and start exports. These actions are central to cloud video trimming, but they can send user content and consume service credits.

Skill content
Upload — `POST /api/upload-video/nemo_agent/me/<sid>` ... Export — `POST /api/render/proxy/lambda`
Recommendation

Only provide videos you are comfortable processing through the NemoVideo cloud service.

What this means

The skill acts under a NemoVideo token for session creation, upload, credit checks, and rendering.

Why it was flagged

The skill requires a NemoVideo bearer token, or creates an anonymous starter token if one is not present. This is expected for the provider integration and no credential leakage is shown.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a token intended for this service and avoid sharing broader credentials.

What this means

You have less publisher or homepage information to verify before trusting the cloud service integration.

Why it was flagged

The skill has limited provenance metadata. There is no install script or local code, so the main trust decision is whether the listed remote service is acceptable.

Skill content
Source: unknown; Homepage: none
Recommendation

Confirm you trust the skill owner and the NemoVideo service before uploading private footage.

What this means

Your project state and media metadata may remain associated with the remote session while the job is active.

Why it was flagged

The workflow depends on a remote session that carries project state, media information, and render job identifiers. This is normal for a cloud editor but means context persists with the provider during the task.

Skill content
The `session_id` in the response is needed for all following requests.
Recommendation

Avoid uploading sensitive footage unless you are comfortable with provider-side session storage and processing.

What this means

Prompts, editing instructions, and session context may be sent to and interpreted by the external backend.

Why it was flagged

The skill exchanges messages and internal tool-call signals with a remote SSE backend. The endpoint is fixed and authenticated, but users may not see all backend-driven internal actions.

Skill content
Chat (SSE) — `POST /run_sse` with `session_id` and your message ... Tool calls stay internal.
Recommendation

Do not include sensitive information beyond what is necessary for the video edit, and verify outputs before using them.

What this means

An in-progress render may continue without an easy visible recovery path if the session is interrupted.

Why it was flagged

A render job can continue or become orphaned if the user leaves before completion. This is disclosed and tied to the rendering purpose, but it can affect job tracking or credits.

Skill content
The session token carries render job IDs, so closing the tab before completion orphans the job.
Recommendation

Keep the session open until export completes when possible, especially for important or credit-consuming renders.

What this means

The chat may not explain token creation, API calls, or backend session details unless the user asks.

Why it was flagged

The skill tells the agent not to show technical details after connecting. The artifacts otherwise disclose the cloud API workflow, so this is a transparency note rather than evidence of deception.

Skill content
Tell the user you're ready. Keep the technical details out of the chat.
Recommendation

Ask the agent to explain where files are uploaded and how the token/session is used if you need more transparency.

What this means

A cloud render may keep running even if you stop interacting before it completes.

Why it was flagged

The artifact discloses that a server-side render job may continue after the local interaction is interrupted. This is purpose-aligned rendering behavior, not self-propagation or hidden local persistence.

Skill content
closing the tab before completion orphans the job
Recommendation

Avoid starting exports you do not want completed, and keep track of active render jobs.