v1.0.0

Editor Effects

BenignClawScan verdict for this skill. Analyzed Apr 30, 2026, 11:00 PM.

Analysis

This instruction-only video editing skill is coherent with its purpose, but it sends prompts and media to a disclosed NemoVideo cloud API using a token.

GuidanceBefore installing, make sure you are comfortable sending your videos, audio, images, prompts, and project state to the NemoVideo cloud service. The artifacts do not show local code execution or credential misuse, but you should use only an appropriate NemoVideo token and avoid uploading media that should not leave your environment.

Findings (8)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agent Goal Hijack

SeverityLowConfidenceMediumStatusNote

SKILL.md

Backend Response Translation ... "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow

The remote backend's GUI-style responses are treated as instructions for API actions. This is aligned with the editing workflow, but it means backend responses can influence what the agent does inside the service.

User impactBackend-directed messages may cause edits, state checks, or exports within the video service.

RecommendationKeep export or credit-consuming actions tied to clear user intent, and summarize important changes back to the user.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

Upload — POST /api/upload-video/nemo_agent/me/<sid> ... Export — POST /api/render/proxy/lambda ... Poll GET /api/render/proxy/lambda/<id> every 30s

The skill uses API operations to upload media, render, poll, and export. These are central to the stated video-editing purpose and are disclosed.

User impactYour files and edit requests can be sent to the cloud service and may start render jobs.

RecommendationOnly provide media you are comfortable uploading, and confirm export actions when credits or final outputs matter.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceMediumStatusNote

metadata

Source: unknown; Homepage: none

The package provides no public source or homepage provenance. There is no install script or code in the artifacts, but the provider identity should still be considered before using the remote API.

User impactYou have less external information for verifying who operates or maintains the skill.

RecommendationVerify that you trust the listed NemoVideo API endpoint before uploading private or valuable media.

Human-Agent Trust Exploitation

SeverityLowConfidenceMediumStatusNote

SKILL.md

Tell the user you're ready. Keep the technical details out of the chat.

The skill encourages a simplified user experience. This is not inherently deceptive because the cloud API details are documented, but users should still be told material facts such as cloud upload and token use when relevant.

User impactA user may not see the backend connection details during normal chat unless they ask or review the skill.

RecommendationDo not hide material privacy, credit, or upload implications; keep only low-level endpoint details out of the conversation.

Rogue Agents

SeverityLowConfidenceMediumStatusNote

SKILL.md

The session token carries render job IDs, so closing the tab before completion orphans the job ... Poll `GET /api/render/proxy/lambda/<id>` every 30s

Cloud render jobs and polling can continue as part of the requested export workflow. This is disclosed and purpose-aligned, but it is persistent remote activity.

User impactA render job may continue on the provider side even if the local chat or tab is closed.

RecommendationStart exports only when intended, and keep track of render jobs or credits if you stop the session early.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

SKILL.md

Every API call needs Authorization: Bearer <NEMO_TOKEN> ... If `NEMO_TOKEN` is in the environment, use it directly ... Otherwise, acquire a free starter token

The skill requires a bearer token or obtains an anonymous starter token for the NemoVideo API. This is expected for the integrated cloud service, and the artifacts do not show unrelated credential use.

User impactThe skill can use your NemoVideo token or an anonymous token to access credits, sessions, and render jobs.

RecommendationUse a token intended for this service and avoid sharing credentials for unrelated accounts.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityLowConfidenceMediumStatusNote

SKILL.md

State — GET /api/state/nemo_agent/me/<sid>/latest — current draft and media info ... poll `/api/state` to confirm the timeline changed

The skill relies on remote session state containing draft and media information. This is expected for cloud editing, but it is persistent context the agent trusts when reporting updates.

User impactDrafts, media metadata, and render state may remain associated with a remote session.

RecommendationAvoid uploading sensitive media unless you are comfortable with the provider storing session and draft state for processing.

Insecure Inter-Agent Communication

SeverityMediumConfidenceHighStatusNote

SKILL.md

All calls go to `https://mega-api-prod.nemovideo.ai` ... Chat (SSE) — `POST /run_sse` ... Upload — `POST /api/upload-video/nemo_agent/me/<sid>`

The skill sends user messages and uploaded media to an external provider over documented API endpoints. This is purpose-aligned and disclosed, but it is a sensitive data boundary.

User impactPrivate videos, audio, images, URLs, and prompts may be transmitted to the NemoVideo cloud service.

RecommendationUse the skill only with media you are allowed to upload to a third-party cloud processor.