Video Explanation

PassAudited by ClawScan on May 11, 2026.

Overview

This skill is coherent for generating explained videos through a cloud video service, but users should know their selected media and provider token are sent to NemoVideo’s backend.

Install/use this skill only if you are comfortable sending selected video files to NemoVideo’s cloud service. Use a dedicated token if available, avoid sensitive media unless you trust the provider, and ask for confirmation before exports or edits when working with important content.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Videos may contain private people, places, audio, or business information and will be processed by the external NemoVideo service.

Why it was flagged

The core workflow sends user-selected video or media files to a remote provider API for processing.

Skill content
Send me your existing video file ... The AI explanation generation runs on remote GPU nodes ... Upload: POST `/api/upload-video/nemo_agent/me/<sid>`
Recommendation

Only upload media you are comfortable sending to the provider, and review the provider’s privacy/retention terms before using it for sensitive content.

What this means

The agent can act against the NemoVideo service using the configured or newly obtained token for this workflow.

Why it was flagged

The skill uses an authorization token or creates an anonymous provider token to access the cloud service and credits.

Skill content
If `NEMO_TOKEN` is in the environment, use it directly ... Otherwise, acquire a free starter token ... token with 100 free credits valid for 7 days
Recommendation

Use a dedicated token where possible, avoid sharing high-value account credentials, and revoke or rotate the token if you stop using the skill.

What this means

Provider responses can drive follow-on API actions such as state queries or export, though the actions appear bounded to the stated video workflow.

Why it was flagged

The skill instructs the agent to translate backend responses into API actions within the remote editing/export workflow.

Skill content
Backend says ... "click [button]" ... You do: Execute via API ... "Export button" ... Execute export workflow
Recommendation

For sensitive projects, ask the agent to summarize intended edits or exports before proceeding.

What this means

Users have less independent information for verifying the service operator and support/privacy details.

Why it was flagged

There is no local code to install, but the listing provides limited provenance for the publisher or backing service.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Treat the service as an external cloud processor and verify the provider before uploading private or regulated media.