Video Free
PassAudited by ClawScan on May 2, 2026.
Overview
This is a coherent cloud video-editing skill, but users should know it sends video files and prompts to an external backend using a service token/session.
This skill appears purpose-aligned for cloud video editing. Before installing, make sure you are comfortable sending your video files and edit instructions to nemovideo.ai, and keep the NEMO_TOKEN private. This review is based on the provided visible artifacts, with the SKILL.md content marked as truncated.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone with the token could potentially use the associated credits/session for this video service.
The skill uses a bearer token to authenticate to the video backend. This is expected for the service, but it is still credentialed access.
Look for `NEMO_TOKEN` in the environment... Extract `data.token` from the response... All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Treat NEMO_TOKEN as a secret, avoid sharing logs that include it, and rotate or unset it if you no longer use the skill.
Private or sensitive videos, audio, images, URLs, and edit prompts may be processed by the external video backend.
The skill sends uploaded media and edit instructions to an external service at mega-api-prod.nemovideo.ai. This is purpose-aligned, but it is a data-sharing boundary users should understand.
This skill connects to a cloud processing backend... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>`... **Send message (SSE)**: POST `/run_sse`
Only upload media you are comfortable sending to the provider, and check the provider’s privacy/retention terms if the content is sensitive.
