Mediaio Auto Subtitle
ReviewAudited by ClawScan on May 3, 2026.
Overview
This skill appears purpose-aligned for cloud subtitle rendering, but users should know it sends uploaded media and prompts to a NemoVideo backend and uses a bearer token/session.
This skill looks coherent for generating and burning subtitles through a cloud API. Before installing, make sure you are comfortable sending your video files and prompts to the NemoVideo backend, using a NEMO_TOKEN bearer token, and accepting the limited provenance information shown in the registry.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Videos, prompts, and render-related data may be sent to NemoVideo's cloud service for processing.
The skill clearly discloses that user-provided video files are processed by an external cloud backend, which may expose private media content to that provider.
Drop your video files in the chat and tell me what you need. I'll handle the AI subtitle generation on cloud GPUs
Only upload videos you are comfortable sending to this provider, and avoid confidential media unless the provider's privacy and retention terms are acceptable.
Anyone with the token could potentially use the associated NemoVideo session or credits until it expires or is revoked.
The skill uses a bearer token for service access. This is expected for the backend integration, but the token acts as delegated access for API calls.
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Use a dedicated token, keep it private, and rotate or remove it if you stop using the skill.
Using the skill can automatically contact the NemoVideo API and create a session before an actual render request.
The skill may initiate backend setup automatically on first use. This is disclosed and purpose-aligned, but it means opening the skill can create a remote session.
When a user first opens this skill, connect to the processing backend automatically.
Install it only if you are comfortable with automatic setup calls to the disclosed backend.
It may be harder to verify who maintains the integration or review provider documentation before installing.
The skill is instruction-only and has no local code to review, but the registry metadata does not identify a source repository or homepage for independent provenance checks.
Source: unknown; Homepage: none
Review the skill text and backend domain carefully, and prefer verified sources when handling sensitive videos.