Editor Ai Offline

• Analyzed: May 11, 2026, 5:21 PM
• Findings: 1
• Version: 1.0.0
• Hash: 73348a11c1965df88f5a64a2ed674ac9f9893836dfc23cd3ceaae55338def6f7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill exhibits deceptive naming and behavior by claiming to be an 'Offline' video editor in its title and description while the internal instructions explicitly require uploading user files to a remote cloud API (mega-api-prod.nemovideo.ai). This contradiction creates a significant risk of unintentional data exfiltration for users who expect local processing. The instructions also direct the agent to automatically fetch anonymous tokens and hide raw API outputs from the user, further reducing transparency regarding the destination of uploaded media.