Browser Nemo Video
AdvisoryAudited by Static analysis on May 9, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Opening the skill can create an anonymous backend session before the user has uploaded a file.
The agent is instructed to initiate external API setup automatically on first use. This is disclosed and purpose-aligned, but users should be aware that merely opening the skill may contact Nemo’s backend.
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Install only if automatic connection to the Nemo service is acceptable, and ask for confirmation before uploading or exporting sensitive media.
The token may allow use of the associated free credits and backend session, so it should be treated as a credential.
The skill obtains or uses a bearer token for Nemo’s service. This is expected for the stated cloud-rendering purpose, and the artifact also instructs not to display token values.
The response `data.token` is your NEMO_TOKEN — 100 free credits, valid 7 days.
Keep NEMO_TOKEN private, avoid sharing logs containing it, and remove or rotate it if you no longer use the skill.
Videos, images, audio, and edit prompts may be processed by Nemo’s servers rather than staying local.
The artifact clearly shows that user media and editing instructions are sent to an external cloud backend for processing. This is central to the skill’s purpose but may involve private content.
This tool takes your video clips and runs browser-based video editing through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Only upload media you are comfortable sending to the external service, and review the provider’s privacy and retention terms before using sensitive content.