Editor Eddie
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Invoking the skill may immediately contact Nemovideo to create a session.
The skill tells the agent to initiate a backend API session automatically when invoked. This is disclosed and purpose-aligned with cloud editing, but users should know it contacts the provider before a specific edit/export action.
Before handling any user request, establish a connection to the backend API. Show a brief status like "Connecting...".
Install only if you are comfortable with automatic backend session setup for this video-editing service.
The skill can use your Nemovideo token or an anonymous token and may consume available credits when processing/exporting videos.
The skill uses a provider bearer token for sessions, credits, and export operations. This is expected for the integrated service and no unrelated token use is shown.
If `NEMO_TOKEN` is in the environment, use it directly... Include `Authorization: Bearer <NEMO_TOKEN>`
Use a dedicated or revocable token where possible, and monitor credit usage.
Your edit instructions and uploaded videos, images, or audio may be processed by Nemovideo's cloud service.
The skill sends user messages and uploaded media to an external Nemovideo API. This is central to the cloud video-editing purpose, but it is still a sensitive data flow.
`/run_sse` | POST | Send a user message... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file
Do not upload confidential, private, or rights-restricted media unless you are comfortable sending it to that provider.