Video Trimmer Cutter

• Risk level: Low Risk
• Analyzed: Apr 15, 2026, 11:24 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requests and runtime instructions broadly match a cloud video-trimming service; nothing appears intentionally deceptive, but there are a few small inconsistencies and privacy considerations to review before installing.

This skill looks like a straightforward client for the nemo video-rendering API, but it sends your uploaded video files and (if present) your NEMO_TOKEN to https://mega-api-prod.nemovideo.ai. Before installing, consider: (1) Do you trust that external service to process and store your videos? Avoid uploading sensitive or private footage. (2) The skill can obtain an anonymous token itself if you don't provide one — it will make network calls to mint that token. (3) The runtime asks the agent to inspect some filesystem paths to set an attribution header (it references install directories beyond the declared config path); this is a minor inconsistency but means the skill may check for agent install locations. If any of these are unacceptable, do not install the skill. If you proceed, prefer using a limited/throwaway token and review the third‑party service's privacy/security documentation.