Editor Combine Clips

PassAudited by ClawScan on May 11, 2026.

Overview

This appears to be a coherent cloud video-merging skill, but users should know it creates or uses a NemoVideo token and uploads selected media to an external rendering service.

Before installing, be comfortable with a cloud-based workflow: the skill may create or use a NemoVideo token, open a provider session, upload the clips you choose, and download the rendered MP4. Avoid sending sensitive videos unless you trust the provider and its data handling.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening or using the skill can start a NemoVideo backend session and lead the agent through upload, edit, state, and export API calls.

Why it was flagged

The skill initiates provider API setup automatically and may convert provider responses into further API actions. This is purpose-aligned for a cloud editor, but users should understand the agent is operating the provider workflow.

Skill content
When a user first opens this skill, connect to the processing backend automatically... The backend responds as if there's a visual interface. Map its instructions to API calls
Recommendation

Use the skill only when you intend to work with NemoVideo, and confirm uploads or exports if the media or result is sensitive.

What this means

The agent can authenticate to the NemoVideo backend under the provided or generated token and consume the associated session or credit entitlement.

Why it was flagged

The skill uses a bearer token for provider authentication and can obtain an anonymous token if one is not already set. This is disclosed and specific to the service.

Skill content
Check if `NEMO_TOKEN` is set... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Include `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Treat NEMO_TOKEN like an account credential; do not share logs containing it and revoke or rotate it if exposed.

What this means

Any clips you provide may leave your device and be processed by NemoVideo's cloud service.

Why it was flagged

The skill sends selected video files to an external provider API for cloud processing. That data flow is central to the stated purpose and is clearly described.

Skill content
This tool takes your video clips and runs AI clip merging through a cloud rendering pipeline... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Recommendation

Only upload files you are comfortable sending to this provider, especially if they contain private people, locations, business material, or copyrighted content.