Video Editor Creator

ReviewAudited by ClawScan on May 11, 2026.

Overview

This appears to be a legitimate cloud video-editing skill, but it will use a NemoVideo token and upload selected videos and prompts to an external service.

Before using this skill, confirm you are comfortable sending your video files, prompt text, and project state to NemoVideo's cloud API. Use a dedicated token, avoid confidential recordings unless approved, and verify any credit or subscription implications before exporting.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening the skill may create a backend session and contact the provider even before editing starts.

Why it was flagged

The skill initiates remote API setup automatically at first use. This is disclosed and aligned with cloud video processing, but users should know the skill contacts the backend before an explicit upload action.

Skill content
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Recommendation

Use the skill only if you are comfortable with automatic setup calls to the NemoVideo backend; avoid opening it in contexts where no external connection should occur.

What this means

The skill can use the configured or generated NemoVideo token to create sessions, upload media, check credits, and render exports.

Why it was flagged

The skill uses a provider token and session identifier to authenticate backend actions. This is expected for the service and no token leakage is shown, but it is still credential-based authority.

Skill content
Check if `NEMO_TOKEN` is set in the environment... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Store the returned `session_id` for all subsequent requests.
Recommendation

Prefer a dedicated, revocable NemoVideo token; do not reuse sensitive credentials, and clear or rotate the token if you no longer trust the skill.

What this means

Videos, prompts, and related project state may be processed by NemoVideo's cloud service rather than staying local.

Why it was flagged

User-selected videos or URLs are sent to a third-party cloud backend for processing. This is central to the skill's purpose and disclosed, but raw recordings can contain private or business-sensitive content.

Skill content
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Upload only media you are allowed to share with the provider, review the provider's privacy and retention practices, and avoid confidential recordings unless policy permits.