Batch Video Creator Online

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for cloud-based batch video creation, but users should know it connects to NemoVideo, uses a bearer token, and uploads selected media to an external service.

Before installing, confirm you are comfortable sending selected media files and prompts to the NemoVideo cloud API. Keep the NEMO_TOKEN secret, and avoid using the skill for sensitive or confidential videos unless you trust the provider.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users have less independent context for verifying who operates the backend before sending media files.

Why it was flagged

There is no local code to install, but the skill's publisher/source provenance and service homepage are not established in the supplied metadata.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Only use the skill if you are comfortable with the NemoVideo API endpoint described in the skill, especially for non-public videos.

What this means

The agent may create a backend session before a file is uploaded.

Why it was flagged

The skill initiates API interaction with the backend as part of setup. This is disclosed and aligned with cloud rendering, but users should know opening/using the skill can start network activity.

Skill content
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Recommendation

Use the skill when you intend to connect to the cloud service; avoid invoking it for purely local editing expectations.

What this means

Anyone with the token may be able to act against the associated NemoVideo session or credits until it expires or is revoked.

Why it was flagged

The skill uses a bearer token for the NemoVideo service. This is expected for the stated API integration, and the artifacts do not show logging, hardcoding, or unrelated use of the token.

Skill content
All requests must include: `Authorization: Bearer <NEMO_TOKEN>` ...
Recommendation

Keep NEMO_TOKEN private and do not paste it into chats or documents.

What this means

Uploaded media and project state may be processed and temporarily stored by the external backend.

Why it was flagged

User-selected media can be uploaded to the NemoVideo cloud service for processing. This is central to the skill, but it creates an external data boundary for potentially private videos, images, audio, and prompts.

Skill content
`Upload`: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"` ...
Recommendation

Do not upload confidential, regulated, or third-party media unless you trust the service and have permission to process it there.