Generator Green

PassAudited by ClawScan on May 10, 2026.

Overview

This is a coherent cloud video-editing skill, but users should know it sends selected media and prompts to NemoVideo and uses a provider token.

This skill appears purpose-aligned for cloud green-screen removal. Before using it, be comfortable sending your selected media and editing prompts to mega-api-prod.nemovideo.ai, and keep the NEMO_TOKEN private.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Videos, images, audio, and prompts selected for editing may leave the local device and be processed by NemoVideo's cloud service.

Why it was flagged

The skill clearly discloses that user videos and editing instructions are sent to a cloud backend, which is expected for this purpose but relevant for privacy.

Skill content
This tool takes your video clips and runs green screen removal through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Only upload media you are comfortable sending to the provider, and review the provider's privacy and retention terms if the content is sensitive.

What this means

The skill will authenticate to NemoVideo and spend or check credits associated with the token or anonymous session.

Why it was flagged

The skill uses a provider authentication token and can create an anonymous token if one is not already configured; this is disclosed and aligned with the backend service.

Skill content
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Include `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a dedicated token when possible, do not share it in chat, and revoke or rotate it if you suspect exposure.

What this means

Edits, state checks, and exports may be performed through API calls based on the provider workflow rather than a visible local UI.

Why it was flagged

Provider SSE responses can be translated into API actions within the editing session. This is part of the intended workflow, but users should understand that backend responses drive some operations.

Skill content
The backend responds as if there's a visual interface. Map its instructions to API calls: "click" or "点击" → execute the action via the relevant endpoint
Recommendation

Confirm important actions such as uploads and exports, especially for large or private videos.

What this means

Users have less independent information for verifying who operates the cloud service or skill package.

Why it was flagged

The package has limited provenance information, although it is instruction-only and no executable code or install script is present.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing only if you trust the publisher and the NemoVideo service endpoint used by the skill.