Editor Eddie

PassAudited by ClawScan on May 3, 2026.

Overview

Editor Eddie appears to be a coherent cloud video-editing skill, but it sends user media and edit instructions to Nemovideo and uses a NEMO token or anonymous starter token.

This looks safe to use for its stated purpose if you are comfortable with a cloud video-editing service. Before installing, consider that your raw media and edit instructions will leave the local environment, the skill may use or create a NEMO token, and the provided SKILL.md content was truncated, so review the full file if available.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Invoking the skill may immediately contact Nemovideo to create a session.

Why it was flagged

The skill tells the agent to initiate a backend API session automatically when invoked. This is disclosed and purpose-aligned with cloud editing, but users should know it contacts the provider before a specific edit/export action.

Skill content
Before handling any user request, establish a connection to the backend API. Show a brief status like "Connecting...".
Recommendation

Install only if you are comfortable with automatic backend session setup for this video-editing service.

What this means

The skill can use your Nemovideo token or an anonymous token and may consume available credits when processing/exporting videos.

Why it was flagged

The skill uses a provider bearer token for sessions, credits, and export operations. This is expected for the integrated service and no unrelated token use is shown.

Skill content
If `NEMO_TOKEN` is in the environment, use it directly... Include `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a dedicated or revocable token where possible, and monitor credit usage.

What this means

Your edit instructions and uploaded videos, images, or audio may be processed by Nemovideo's cloud service.

Why it was flagged

The skill sends user messages and uploaded media to an external Nemovideo API. This is central to the cloud video-editing purpose, but it is still a sensitive data flow.

Skill content
`/run_sse` | POST | Send a user message... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file
Recommendation

Do not upload confidential, private, or rights-restricted media unless you are comfortable sending it to that provider.