Free Social Copy Generator

This skill mostly does what it says (upload videos to a remote service and return rendered captioned videos), but review these points before installing: 1) NEMO_TOKEN is sensitive — it allows the remote service to accept uploads and manage renders. Confirm what that token can access and whether it reuses account-level credentials. 2) The skill will mint an anonymous token if none is present and store session IDs/tokens; ask where they are stored (metadata mentions ~/.config/nemovideo/) and whether they are written to disk. 3) The SKILL.md instructs the agent to inspect install paths to set an attribution header — consider whether you want the skill to read your filesystem layout. 4) The skill communicates with a third-party domain (mega-api-prod.nemovideo.ai); only upload non-sensitive video content unless you trust the service and its privacy policy. 5) Registry metadata and SKILL.md disagree about required config paths — this is likely sloppy packaging but worth clarifying with the publisher. If you decide to proceed: create and use an ephemeral or limited-scope token (not one tied to sensitive accounts), avoid uploading private data, and consider running the skill in an environment where accidental token persistence is acceptable. If you need higher assurance, ask the publisher for a privacy/security statement and an explicit explanation of where tokens/sessions are stored and how long they are retained.