Solo Video

• Outcome: Review
• Latest audit: May 29, 2026 at 9:34 PM UTC
• Version:
  1.0.0

Overview

This is a real cloud video-editing skill, but it can automatically create cloud sessions and send personal media or prompts to NemoVideo without a clear consent boundary.

Install only if you are comfortable sending your videos, audio, images, prompts, and session metadata to NemoVideo's cloud service. Avoid sensitive personal or confidential media unless you trust that provider, and prefer explicit confirmation before connecting, creating a session, uploading files, or exporting.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The skill instructs users to upload media to a cloud backend and obtain anonymous tokens, but it does not clearly disclose the privacy and data-handling implications before upload. Users may share sensitive video, audio, or image content without informed consent about third-party processing, retention, or account linkage, which creates a real privacy and trust risk.

VirusTotal

64/64 vendors flagged this skill as clean.