Noizai Video
ReviewAudited by ClawScan on Apr 30, 2026.
Overview
This instruction-only skill appears purpose-aligned, but it sends uploaded videos, prompts, and service tokens to a disclosed cloud processing API.
This skill is reasonable for cloud video noise removal, but only use it with footage you are comfortable uploading to `mega-api-prod.nemovideo.ai`; protect your NEMO_TOKEN and monitor credits when exporting.
Findings (7)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the backend gives an unexpected instruction, the agent may perform an unintended edit, state query, or export within the Noizai workflow.
Backend-provided instructions are intentionally translated into further API actions, so the service response can steer the workflow within the video-editing task.
"The backend responds as if there's a visual interface. Map its instructions to API calls"
Use this skill for the intended video workflow and review summaries before export or other credit-consuming operations.
Using the skill may upload files to the provider and consume processing credits for render/export jobs.
The skill can upload user media and start cloud render/export jobs, which is expected for video cleanup but is still a meaningful external action.
"Upload — POST /api/upload-video/nemo_agent/me/<sid>" and "Export — POST /api/render/proxy/lambda"
Only provide videos you intend to process with this service, and confirm export or credit-sensitive actions when appropriate.
Anyone with the token could potentially use the associated service credits or session access.
The skill uses a bearer token to authenticate to the Noizai/Nemo video service, which is expected for this cloud integration.
"Every API call needs `Authorization: Bearer <NEMO_TOKEN>`"
Use a dedicated or temporary token where possible, do not paste tokens into chat, and rotate the token if it is exposed.
Users must trust the listed publisher and API endpoint without an artifact-provided project homepage or source link.
The skill has no source repository or homepage listed, so users have limited provenance information for the publisher or integration.
Source: unknown; Homepage: none
Verify that the `mega-api-prod.nemovideo.ai` service and publisher are acceptable before sending sensitive media.
A stale or mixed-up session could cause the agent to act on the wrong draft or media state.
The skill keeps and reuses a remote session identifier and retrieves session state containing draft and media information.
"Save `session_id` from the response" and "State — GET /api/state/nemo_agent/me/<sid>/latest — current draft and media info"
Use separate sessions for separate projects and ask for a state summary before making important edits or exports.
Uploaded video/audio, prompts, session state, and authorization tokens are sent to the external video-processing provider.
The skill communicates with an external provider API for chat, upload, state, render, and export operations.
"All calls go to `https://mega-api-prod.nemovideo.ai`" and "Chat (SSE) — `POST /run_sse`"
Do not use the skill with confidential footage unless the provider's privacy, retention, and account terms meet your needs.
An interrupted export may continue or become hard to recover, potentially wasting processing time or credits.
The documented cloud render lifecycle can leave a remote render job orphaned if the session is interrupted.
"closing the tab before completion orphans the job"
Keep the session open until export completes and check credits/status if a render is interrupted.