Editor Easy

ReviewAudited by ClawScan on May 3, 2026.

Overview

Editor Easy appears to be a coherent cloud video-editing skill, but it will send media to NemoVideo's API and use service tokens or credits to render exports.

Install this only if you are comfortable using NemoVideo's cloud service for your media. Avoid uploading sensitive footage unless you trust the provider, use a dedicated token if possible, and ask for confirmation before exports or other credit-consuming actions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may contact the external service and run editing or export workflows as part of normal use, potentially consuming credits for render/export actions.

Why it was flagged

The skill instructs the agent to initiate remote API setup automatically and translate workflow cues into API actions, including export. This is aligned with the video-editing purpose, but it is still automated remote tool use.

Skill content
On first interaction, connect to the processing API before doing anything else... "Export" or "导出" → run the export workflow
Recommendation

Use the skill only when you intend to use the cloud editor, and ask the agent to confirm before uploads or exports if credit use matters.

What this means

A real NemoVideo token may authorize access to your account/session and available credits.

Why it was flagged

The skill uses a service bearer token, or creates an anonymous one, for all API calls. This is expected for the NemoVideo integration but gives the agent access to the associated service session and credits.

Skill content
If `NEMO_TOKEN` environment variable is already set, use it... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Recommendation

Prefer a dedicated or limited-use token, do not expose it in chat, and monitor credit usage.

What this means

Uploaded videos, audio, images, and edit instructions may leave the local environment and be processed by the external provider.

Why it was flagged

The skill clearly discloses that user videos are processed by an external cloud API. That is purpose-aligned, but media files can contain sensitive personal or business content.

Skill content
Drop your raw video footage in the chat... I'll handle the AI simplified editing on cloud GPUs... All calls go to `https://mega-api-prod.nemovideo.ai`.
Recommendation

Review the provider's privacy terms before uploading sensitive footage, and avoid sending confidential or regulated media unless you are comfortable with that processing.

What this means

A render job may continue remotely after the chat/tab is closed, and the user may lose direct visibility into that job.

Why it was flagged

The artifact says remote render jobs and session state can outlive the immediate interaction. This is normal for cloud rendering but is a persistence behavior users should notice.

Skill content
The session token carries render job IDs, so closing the tab before completion orphans the job.
Recommendation

Keep track of active exports, wait for completion when possible, and monitor credits or job status after starting renders.