Ai Subtitle

• Risk level: Low
• Analyzed: Apr 23, 2026, 3:58 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's declared requirements and runtime instructions are coherent with its stated purpose (uploading and cloud-rendering subtitled videos); nothing requested is disproportionate, though there are a couple of small implementation inconsistencies to be aware of.

This skill sends uploaded videos and rendering instructions to mega-api-prod.nemovideo.ai and requires either a NEMO_TOKEN or will obtain an anonymous token on first use. Before installing, decide whether you are comfortable with your videos being uploaded to that remote service. Note the skill may read local paths to determine attribution (it checks common skill install locations and ~/.config/nemovideo/) and will need access to the files you upload. If you want to avoid persistent credentials, do not set a long-lived NEMO_TOKEN and rely on the anonymous-token flow, but confirm how/where that token is stored if you care about persistence. Finally, verify you trust the nemovideo service (privacy/terms) before sending sensitive content.