Video Editing Ai Maker
PassAudited by VirusTotal on May 5, 2026.
Overview
Type: OpenClaw Skill Name: video-editing-ai-maker Version: 1.0.0 The skill acts as a functional wrapper for a cloud-based video editing service (nemovideo.ai). It provides detailed instructions for the agent to manage authentication via tokens, handle file uploads, and poll for video rendering status. The network activity and file access (MP4/MOV uploads) are strictly aligned with the stated purpose of remote AI video processing, and there is no evidence of data exfiltration, obfuscation, or malicious command execution in SKILL.md or _meta.json.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Videos you provide may leave your device and be processed by the NemoVideo cloud service.
The skill sends user-provided video files to an external backend for processing. That is central to the stated purpose, but raw videos can contain private or business-sensitive content.
“AI-powered video editing runs on remote GPU nodes” and “Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`”
Only upload footage you are comfortable sending to this provider, and avoid confidential or regulated content unless you have reviewed the provider’s privacy and retention terms.
The skill can act within the NemoVideo service using the configured or anonymous token, including creating sessions and render jobs.
The skill uses a service token to create sessions and call render/upload APIs. This is expected for the integration, and the visible artifacts do not show unrelated use or leakage.
“Every API call needs `Authorization: Bearer <NEMO_TOKEN>`” and “Otherwise, acquire a free starter token”
Use a dedicated token where possible, monitor account credits or usage, and do not paste service secrets into chat.
The remote editing backend may cause the agent to perform additional upload, state, edit, or export API steps as part of the workflow.
The skill lets backend responses trigger follow-up API actions inside the video-editing service. This is coherent with the cloud editor workflow, but it means some service-side actions may happen without detailed chat-level explanation.
“Backend says … ‘click [button]’ … You do ‘Execute via API’” and “Tool call/result | Process internally, don't forward”
Ask the agent to summarize planned actions before export or download if you want more visibility.
It may be harder to independently verify who operates the service or what policies apply to uploaded files.
The package has limited provenance information. There is no install code to review here, but the skill does depend on an external service that receives uploaded media.
“Source: unknown” and “Homepage: none”
Verify the provider and service terms before using it for sensitive footage.