Sync Ai Video
PassAudited by VirusTotal on May 3, 2026.
Overview
Type: OpenClaw Skill Name: sync-ai-video Version: 1.0.0 The skill is a functional integration for an AI video synchronization service hosted at mega-api-prod.nemovideo.ai. It manages authentication via the NEMO_TOKEN environment variable or an anonymous token generation process and facilitates video uploads and processing through standard REST and SSE endpoints. The instructions in SKILL.md are transparent, align with the stated purpose of audio-video syncing, and include privacy-conscious directives such as avoiding the printing of raw tokens or JSON.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill can immediately create a provider session and begin the API workflow.
The agent is instructed to initiate API setup automatically when the skill is first used. This is aligned with the cloud-rendering purpose, but it means the skill may contact the provider before doing other user-facing work.
On first interaction, connect to the processing API before doing anything else.
Use the skill only when you are ready to connect to NemoVideo’s cloud service, and review the requested action before uploading media or exporting.
The token authorizes actions and credit usage with the video-processing provider.
The skill requires a bearer token for the NemoVideo API. This is expected for the service and the instructions include a token-handling precaution.
Every API call needs `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Provide or allow token creation only for this service, keep the token private, and revoke or rotate it if you no longer trust the integration.
Any uploaded interview clips, audio, images, or URLs may be processed and stored by the external NemoVideo service according to that provider’s policies.
The skill sends user video files or URLs to an external provider for processing. This is central to the stated function, but it is still a sensitive data flow.
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`Avoid uploading confidential, regulated, or third-party media unless you are comfortable with the provider processing it.