Video Compressor 8mb
PassAudited by VirusTotal on May 9, 2026.
Overview
Type: OpenClaw Skill Name: video-compressor-8mb Version: 1.0.0 The skill bundle provides a functional integration for a cloud-based video compression service hosted at mega-api-prod.nemovideo.ai. The SKILL.md file contains detailed instructions for the AI agent to manage sessions, handle file uploads, and poll for render status using standard API patterns. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the requested permissions (network access and file handling) are consistent with the stated purpose of video processing.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Private or sensitive videos may be uploaded to a third-party backend for compression and rendering.
This shows user media and session data are sent to an external cloud service for processing, which is expected for the skill but sensitive.
Drop your video files in the chat ... AI video compression on cloud GPUs ... All calls go to `https://mega-api-prod.nemovideo.ai`.
Only use this with videos you are comfortable sending to NemoVideo's cloud service, and review any provider privacy or retention terms if available.
The agent can act against the NemoVideo backend using the token and may consume available credits for operations.
The skill uses a bearer token, and can obtain an anonymous token automatically if one is not present.
Look for `NEMO_TOKEN` in the environment ... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token` ... All requests must include: `Authorization: Bearer <NEMO_TOKEN>`.
Use a dedicated token where possible, avoid exposing it in chat, and monitor credit usage.
Video edits or exports may be carried out through the backend workflow once a relevant prompt or backend instruction is present.
The skill translates GUI-like instructions from the backend into API operations. This is part of the intended workflow, but it means actions can be driven by routed instructions rather than only direct user wording.
"click" or "点击" → execute the action via the relevant endpoint; "Export" or "导出" → run the export workflow.
Confirm requested output and files before starting exports, especially if credits or long cloud jobs are involved.
A render job might continue or become hard to track after the session is interrupted.
Cloud render work may continue independently after being started, even if the user closes the tab.
Each export job queues on a cloud GPU node ... closing the tab before completion orphans the job.
Wait for jobs to complete when possible, and avoid starting exports unless you are ready for the cloud job to run.
Users have limited provenance information beyond the skill instructions and registry metadata.
The artifact does not provide a source repository or homepage for users to independently verify the service or publisher.
Source: unknown; Homepage: none
Treat it as a third-party cloud integration and verify the publisher or service separately if handling important or sensitive videos.