Video Searching

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent for video search, but users should notice that it sends search queries to Memories.ai using an API key and has a minor runner-path mismatch in the instructions.

This looks safe for its stated purpose if you trust Memories.ai with your video-search queries and API-key usage. Before installing, confirm the runner path is correct, use a dedicated API key if possible, and avoid putting confidential information into search prompts.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Searches may be performed under the user's Memories.ai account and may consume quota or be logged by the provider.

Why it was flagged

The runner authenticates API calls with the user's MEMORIES_API_KEY. This is expected for the Memories.ai integration, but it is still delegated account authority.

Skill content
-H "Authorization: ${MEMORIES_API_KEY}"
Recommendation

Use a dedicated or scoped API key if available, keep it out of shared environments, and monitor provider usage.

What this means

Any private or sensitive terms included in a video search query may be shared with Memories.ai.

Why it was flagged

The artifacts clearly disclose that user queries are sent to an external API provider and results are streamed back.

Skill content
This skill calls the Memories.ai Video Searching API — a managed, token-authenticated endpoint that searches across platforms and returns structured results via SSE.
Recommendation

Avoid including confidential information in search queries unless the provider's privacy and retention terms are acceptable.

What this means

The agent can launch the included query runner during matching video-search tasks.

Why it was flagged

The skill directs the agent to execute a local runner process and poll it. This is expected for streaming API results and is not shown to perform unrelated commands.

Skill content
Start with `exec` using `background: true`.
Recommendation

Install only if you are comfortable with the agent invoking this local runner for video search requests.

What this means

The skill may fail to run until the runner path is corrected or confirmed.

Why it was flagged

The instruction references a scripts/ path, while the provided artifact manifest lists run_video_query.sh at the root. This appears to be a packaging or documentation mismatch rather than hidden behavior.

Skill content
<skill_dir>/scripts/run_video_query.sh
Recommendation

Verify the installed runner path before use and prefer a package version whose instructions and manifest agree.