Vpick Ai Video
ReviewAudited by ClawScan on May 11, 2026.
Overview
This appears to be a purpose-aligned cloud video-processing skill, but it will create or use a NemoVideo token and upload your media to an external service.
This skill is reasonable for cloud video editing, but install it only if you are comfortable sending selected video files and prompts to mega-api-prod.nemovideo.ai and using or creating a NEMO_TOKEN. Avoid uploading highly sensitive footage unless you have verified the provider's privacy, retention, and credit/billing behavior.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Raw videos, editing instructions, generated drafts, and export results may be processed by the NemoVideo cloud service.
The skill clearly sends user media and prompts to a remote cloud processing backend, which is expected for this purpose but involves sensitive data leaving the user's environment.
This tool takes your raw video footage and runs AI video selection through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Only upload footage you are comfortable sending to this provider, and avoid confidential or regulated media unless you have verified the provider's privacy and retention terms.
Anyone with the token could potentially use the associated service access or credits until the token expires or is revoked.
The skill uses a bearer token to authorize provider API calls. This is purpose-aligned for a cloud rendering service but gives the skill access to the user's NemoVideo session and credits.
Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Keep NEMO_TOKEN private, do not share logs containing it, and rotate or remove the token if you no longer use the skill.
Users have less independent context for who operates the service or how uploaded media is handled.
The registry does not provide a source repository or homepage for provenance review. There is no local code in this artifact set, so this is a provenance note rather than a behavioral concern.
Source: unknown; Homepage: none
Verify the provider and terms of service before sending private or business-sensitive video.
A render job may continue or become hard to recover if the session is interrupted, potentially affecting credits or access to the result.
The skill documents that cloud render jobs can become detached from the active session if interrupted. This is an operational risk of the workflow, not evidence of malicious persistence.
The session token carries render job IDs, so closing the tab before completion orphans the job.
Keep the session active until export completes, and check job status before starting duplicate renders.