Trimmer In Between

• Risk level: Low
• Analyzed: Apr 28, 2026, 12:23 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requests and runtime instructions are largely consistent with a cloud-based video trimming service, but there are a few small mismatches and privacy considerations you should be aware of before using it.

This skill appears to be a straightforward cloud-based video trimmer: it will upload your videos and associated metadata to mega-api-prod.nemovideo.ai for processing and will use a NEMO_TOKEN (either one you set or one obtained anonymously). Consider the following before installing/using: (1) Privacy — your videos are sent to a third party; check their retention/terms if the content is sensitive. (2) Credential behavior — if you don't set NEMO_TOKEN yourself, the skill will call an anonymous-token endpoint and use that token (7-day expiry, free credits) — decide whether you prefer to supply your own token. (3) Local reads — the skill will probe a couple of install-path locations and read this SKILL.md frontmatter to build attribution headers; this is low-risk but unnecessary for trimming. (4) Source/maintainer — there is no homepage or source repo listed; if you need higher assurance, ask the publisher for a repo, privacy policy, or official docs before using. If you want the assessment to change: provide the skill's source code or an official homepage/maintainer contact and details about what data the backend retains/how it is protected.