In Video

• Risk level: Low
• Analyzed: Apr 22, 2026, 4:26 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requested credentials and runtime actions align with a remote AI video-editing service; no obviously unrelated or excessive privileges are requested, but there are small inconsistencies and some file-system access expectations you should understand before installing.

This skill appears to be a straightforward adapter for the nemovideo.ai editing API and will upload whatever video files you send to that backend. Before installing or using it: (1) confirm you trust mega-api-prod.nemovideo.ai as the destination for your videos and any sensitive content, (2) understand that the agent may read local file paths you provide and may probe a few home-directory paths for attribution headers, (3) supply only a token (NEMO_TOKEN) you intend to share — the skill can obtain an anonymous short-lived token if you don't have one, and (4) note the SKILL.md metadata references a config path (~/.config/nemovideo/) not declared elsewhere; if you need stronger assurance, ask the publisher for a homepage or source code and clarification of why the agent probes install/config paths.