Editor Anup

PassAudited by ClawScan on May 10, 2026.

Overview

This skill coherently provides cloud video editing, with the main cautions being that your uploaded media, NemoVideo token, and render credits are handled by an external service.

This appears coherent for a cloud video-editing skill. Before installing, be comfortable sending selected footage to mega-api-prod.nemovideo.ai, protect your NEMO_TOKEN, and confirm exports if provider credits or costs may be involved.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Uploaded videos, images, or audio may contain personal or business-sensitive content and will be processed by the external NemoVideo service.

Why it was flagged

The skill clearly sends user-selected video or media files to an external cloud service for processing, which is central to its purpose but creates a privacy boundary.

Skill content
This tool takes your raw video footage and runs AI video editing through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Only upload media you intend to send to that provider, and review the provider's privacy and retention terms before using it for sensitive footage.

What this means

A NemoVideo token may allow access to editing sessions or consume render credits if misused.

Why it was flagged

The skill uses a bearer token to authorize sessions, uploads, credit checks, and render/export requests. This is expected for the NemoVideo integration.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a dedicated or limited token if available, keep NEMO_TOKEN private, and monitor credit usage when exporting.

What this means

Edits or exports may be performed as part of the backend-guided workflow, and exports could use provider credits.

Why it was flagged

The skill instructs the agent to translate backend UI-style responses into follow-up API actions, including export. This is coherent for a GUI-backed editing service, but it gives backend responses operational influence.

Skill content
Backend Response Translation ... `click [button]` / `点击` | Execute via API ... `Export button` / `导出` | Execute export workflow
Recommendation

Keep API actions limited to the active user-requested project and confirm before any export that may cost credits.

What this means

It may be harder to verify who maintains the skill or compare the instructions against an official provider source.

Why it was flagged

The skill has no code or install step, but the registry metadata does not provide a source repository or homepage for independent verification.

Skill content
Source: unknown; Homepage: none
Recommendation

Install only if you trust the publisher and the NemoVideo API endpoint used by the skill.