Video Free

PassAudited by ClawScan on May 2, 2026.

Overview

This is a coherent cloud video-editing skill, but users should know it sends video files and prompts to an external backend using a service token/session.

This skill appears purpose-aligned for cloud video editing. Before installing, make sure you are comfortable sending your video files and edit instructions to nemovideo.ai, and keep the NEMO_TOKEN private. This review is based on the provided visible artifacts, with the SKILL.md content marked as truncated.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone with the token could potentially use the associated credits/session for this video service.

Why it was flagged

The skill uses a bearer token to authenticate to the video backend. This is expected for the service, but it is still credentialed access.

Skill content
Look for `NEMO_TOKEN` in the environment... Extract `data.token` from the response... All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Treat NEMO_TOKEN as a secret, avoid sharing logs that include it, and rotate or unset it if you no longer use the skill.

What this means

Private or sensitive videos, audio, images, URLs, and edit prompts may be processed by the external video backend.

Why it was flagged

The skill sends uploaded media and edit instructions to an external service at mega-api-prod.nemovideo.ai. This is purpose-aligned, but it is a data-sharing boundary users should understand.

Skill content
This skill connects to a cloud processing backend... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>`... **Send message (SSE)**: POST `/run_sse`
Recommendation

Only upload media you are comfortable sending to the provider, and check the provider’s privacy/retention terms if the content is sensitive.