Video Editing Ai Maker
AdvisoryAudited by Static analysis on May 5, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Videos you provide may leave your device and be processed by the NemoVideo cloud service.
The skill sends user-provided video files to an external backend for processing. That is central to the stated purpose, but raw videos can contain private or business-sensitive content.
“AI-powered video editing runs on remote GPU nodes” and “Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`”
Only upload footage you are comfortable sending to this provider, and avoid confidential or regulated content unless you have reviewed the provider’s privacy and retention terms.
The skill can act within the NemoVideo service using the configured or anonymous token, including creating sessions and render jobs.
The skill uses a service token to create sessions and call render/upload APIs. This is expected for the integration, and the visible artifacts do not show unrelated use or leakage.
“Every API call needs `Authorization: Bearer <NEMO_TOKEN>`” and “Otherwise, acquire a free starter token”
Use a dedicated token where possible, monitor account credits or usage, and do not paste service secrets into chat.
The remote editing backend may cause the agent to perform additional upload, state, edit, or export API steps as part of the workflow.
The skill lets backend responses trigger follow-up API actions inside the video-editing service. This is coherent with the cloud editor workflow, but it means some service-side actions may happen without detailed chat-level explanation.
“Backend says … ‘click [button]’ … You do ‘Execute via API’” and “Tool call/result | Process internally, don't forward”
Ask the agent to summarize planned actions before export or download if you want more visibility.
It may be harder to independently verify who operates the service or what policies apply to uploaded files.
The package has limited provenance information. There is no install code to review here, but the skill does depend on an external service that receives uploaded media.
“Source: unknown” and “Homepage: none”
Verify the provider and service terms before using it for sensitive footage.