Editor Fixed

ReviewAudited by ClawScan on May 3, 2026.

Overview

This skill is a coherent cloud video-editing integration, but users should understand that their media and prompts are sent to an external NemoVideo API using a service token.

This appears safe for its advertised purpose, but treat it like a cloud upload service: only send videos or audio you are comfortable processing externally, use a dedicated NemoVideo token if possible, and verify the service terms if your content is private or regulated.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private videos, audio, images, and prompts may be processed by the external NemoVideo backend.

Why it was flagged

The skill discloses that user media and editing instructions are sent to an external cloud service. This is purpose-aligned for video rendering, but the artifacts do not describe retention, privacy controls, or data deletion.

Skill content
This tool takes your edited video file and runs AI error correction through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Use it only with media you are comfortable uploading to the NemoVideo service, and check the service’s privacy/retention terms if the content is sensitive.

What this means

Anyone or any process with the token could potentially use the associated NemoVideo credits or sessions.

Why it was flagged

The skill uses a bearer token to authorize all backend actions. This is expected for the advertised service, but it grants access to the user’s video-processing credits and sessions.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Provide only the intended NemoVideo token, avoid sharing it, and rotate/revoke it if you suspect exposure.

What this means

Users have less independent information to confirm who maintains the integration or what policies apply to the backend service.

Why it was flagged

The skill is instruction-only and transparent about its API calls, but the registry metadata does not provide a source repository or homepage for users to verify the publisher or service provenance.

Skill content
Source: unknown; Homepage: none
Recommendation

Before using it with sensitive media, verify the NemoVideo service and token source through a trusted channel.