Voiceover For

• Risk level: Low
• Analyzed: Apr 18, 2026, 12:12 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requests and runtime instructions align with its stated purpose (cloud voiceover/video rendering) and its single required credential (NEMO_TOKEN); nothing requested appears unrelated or excessive.

This skill appears to do what it says: it uploads videos to nemovideo.ai, uses a NEMO_TOKEN (or obtains a short-lived anonymous token) to create sessions, and returns rendered video URLs. Before installing/using it: 1) Be comfortable that your video content (and any embedded sensitive visuals/audio) will be uploaded to a third-party service (mega-api-prod.nemovideo.ai). 2) Only provide a NEMO_TOKEN you control for this service; do not reuse unrelated secrets in that variable. 3) Note the agent may read user-specified file paths when you ask it to upload local files and may check a couple of home-directory paths to set an attribution header — if you need stricter filesystem/privacy controls, avoid uploading local files or review the agent's file-access policy. 4) If you need more assurance, verify the service domain, its privacy/retention policy, and prefer using anonymous tokens for trial runs.