Windows Movie Maker Free License
PassAudited by VirusTotal on May 4, 2026.
Overview
Type: OpenClaw Skill Name: windows-movie-maker-free-license Version: 1.0.0 The skill uses a deceptive name ('Windows Movie Maker Free License')—a discontinued Microsoft trademark often used as a lure for gray-ware—to provide a cloud-based video editing service. It automatically initiates background connections to a third-party API (mega-api-prod.nemovideo.ai) and uploads user media to external servers. While the behavior aligns with the stated purpose of video editing, the combination of clickbait branding and automated data exfiltration (uploading user videos) to an unverified third-party domain warrants caution, despite no evidence of direct credential theft in SKILL.md.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may contact the NemoVideo backend before the user has uploaded anything.
The skill initiates remote backend setup automatically. This is aligned with cloud editing, but users should know that opening the skill can cause an external API connection.
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Use the skill only if you are comfortable with automatic setup calls to the listed backend.
Anyone with the token could potentially use the associated NemoVideo session or credits until it expires.
The skill uses a bearer token for the NemoVideo service. This is expected for the integration and no token leakage is shown, but it is still credential-based access.
Check if `NEMO_TOKEN` is set in the environment... The response `data.token` is your NEMO_TOKEN... All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Do not share logs or screenshots containing the token, and rotate or remove the token if you no longer use the service.
Private videos, images, audio, and editing prompts may be processed by NemoVideo's cloud service.
The skill sends user media and editing instructions to a third-party cloud backend. This is central to the stated purpose, but it creates a sensitive data boundary.
Drop your video clips in the chat... I'll handle the AI video editing on cloud GPUs... Base URL: `https://mega-api-prod.nemovideo.ai`... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file
Avoid uploading highly sensitive media unless you trust the provider and have reviewed its privacy, retention, and download-link practices.
A user might expect unlimited free export, while the service can involve credits, expiration, registration, or upgrade prompts.
The 'free license' framing is partly balanced by disclosed credits and upgrade-related errors, but users should notice that exports may depend on credits or plan status.
displayName: "Windows Movie Maker Free License — Edit and Export Finished Videos"... `100 free credits, valid 7 days`... `402 | Free plan export blocked... Register or upgrade your plan to unlock export.`
Verify credit limits, export restrictions, and any paid-plan requirements before relying on the skill for time-sensitive work.
Users have less independent information for verifying who operates or maintains the skill.
The registry provides limited provenance information. This is not evidence of malicious behavior, but it matters because the skill depends on a remote media-processing service.
Source: unknown; Homepage: none
Confirm the provider and terms separately before uploading private or valuable media.