Video Maker 4k
ReviewAudited by ClawScan on May 10, 2026.
Overview
This skill is mostly a disclosed cloud video-rendering integration, but it materially overstates 4K output while sending user videos to an unknown external backend.
Review this carefully before installing. If you use it, assume your uploaded footage is sent to NemoVideo’s cloud service, protect the NEMO_TOKEN, and confirm the true export resolution and provider privacy terms before sending private or high-value videos.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may upload private or valuable footage to a third-party service expecting 4K output when the documented pipeline may only produce lower-resolution video.
The artifact advertises 4K output as the core feature, but the documented export pipeline says the compression limit is up to 1080x1920, which is not 4K.
description: ... "export in 4K resolution" ... "get 4K MP4 videos" ... Cloud Render Pipeline Details: "H.264, up to 1080x1920"
Clarify the actual export resolution limits before installation or use, and require explicit user confirmation before uploading footage.
Uploaded videos and related edit instructions are processed by the external NemoVideo backend.
The skill discloses that user-provided videos are sent to an external cloud API for rendering, which is expected for this purpose but involves potentially sensitive media transfer.
Send me your raw video footage... All calls go to `https://mega-api-prod.nemovideo.ai`... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Only upload footage you are comfortable sending to this provider, and look for provider privacy and retention terms before using sensitive media.
The agent will authenticate to the NemoVideo backend using a token tied to credits and render sessions.
The skill uses a bearer token for the video backend and can obtain an anonymous token if one is not already set. This is purpose-aligned and no leakage is shown, but it is still credential use.
Check if `NEMO_TOKEN` is set... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... `Authorization: Bearer <NEMO_TOKEN>`
Treat NEMO_TOKEN as a secret, avoid sharing logs containing it, and revoke or rotate it if exposed.
It is harder to confirm who operates the skill and whether the external backend is the intended provider.
The skill has limited provenance information. While there is no local code to install, users cannot easily verify the publisher or service relationship from the supplied metadata.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Prefer skills with clear publisher identity, homepage, and provider documentation when uploading media or using cloud services.