Sync Ai Video

PassAudited by ClawScan on May 3, 2026.

Overview

This skill is a coherent cloud video-sync integration, but users should know it sends videos and prompts to NemoVideo and uses or creates an API token.

This looks like a purpose-aligned video-sync skill rather than malicious behavior. Before installing, make sure you are comfortable sending your video clips and prompts to the NemoVideo cloud API, and do not use it for sensitive media unless the provider’s privacy and retention practices are acceptable to you.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill can immediately create a provider session and begin the API workflow.

Why it was flagged

The agent is instructed to initiate API setup automatically when the skill is first used. This is aligned with the cloud-rendering purpose, but it means the skill may contact the provider before doing other user-facing work.

Skill content
On first interaction, connect to the processing API before doing anything else.
Recommendation

Use the skill only when you are ready to connect to NemoVideo’s cloud service, and review the requested action before uploading media or exporting.

What this means

The token authorizes actions and credit usage with the video-processing provider.

Why it was flagged

The skill requires a bearer token for the NemoVideo API. This is expected for the service and the instructions include a token-handling precaution.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Recommendation

Provide or allow token creation only for this service, keep the token private, and revoke or rotate it if you no longer trust the integration.

What this means

Any uploaded interview clips, audio, images, or URLs may be processed and stored by the external NemoVideo service according to that provider’s policies.

Why it was flagged

The skill sends user video files or URLs to an external provider for processing. This is central to the stated function, but it is still a sensitive data flow.

Skill content
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Avoid uploading confidential, regulated, or third-party media unless you are comfortable with the provider processing it.