Github Subtitle

• Analyzed: May 11, 2026, 5:36 PM
• Findings: 1
• Version: 1.0.0
• Hash: 4caf2722efb2edc37cfc0eeb1a920d6f9c19082cd760db9d397c2a7a12a3bc1f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a functional integration for the NemoVideo cloud service, designed to automate video subtitling and editing via API. It handles authentication through the `NEMO_TOKEN` environment variable or an anonymous token exchange and manages video uploads and rendering tasks using standard REST and SSE endpoints at `mega-api-prod.nemovideo.ai`. The filesystem access is limited to identifying its own installation environment (e.g., `~/.clawhub/`) and configuration for attribution purposes, with no evidence of data exfiltration, malicious command execution, or harmful prompt injection.