And Video

ReviewAudited by ClawScan on May 4, 2026.

Overview

This is a coherent cloud video-merging skill, but using it will contact NemoVideo, use a service token, and upload your media for processing.

Before installing, confirm you are comfortable using the NemoVideo cloud API. Protect NEMO_TOKEN, expect network calls on first use, and avoid uploading confidential videos or audio unless you trust the provider’s privacy and retention practices.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When you use the skill, it will contact the video service and create a processing session without needing separate local setup.

Why it was flagged

The agent is instructed to automatically call remote API endpoints as part of the video workflow. This is aligned with the cloud-rendering purpose, but it means use of the skill initiates network actions.

Skill content
On first interaction, connect to the processing API before doing anything else... Session: POST to `https://mega-api-prod.nemovideo.ai/api/tasks/me/with-session/nemo_agent`...
Recommendation

Use the skill only when you are ready to interact with the external video service, and review outputs before exporting or downloading.

What this means

The token may authorize use of your NemoVideo session, credits, or account-specific access for this service.

Why it was flagged

The skill uses a service token or creates an anonymous token to authorize API requests. This is expected for the service, and the artifact also instructs not to print tokens.

Skill content
**Token**: If `NEMO_TOKEN` environment variable is already set, use it... **All requests** must include: `Authorization: Bearer <NEMO_TOKEN>`...
Recommendation

Treat NEMO_TOKEN as a secret, prefer a service-specific token, and avoid sharing logs that might include authorization headers.

What this means

You have less information to independently verify who maintains the skill or the associated cloud service.

Why it was flagged

The registry metadata provides limited provenance for the skill. There is no executable install code in the provided artifacts, so this is a provenance note rather than a concrete unsafe install behavior.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the service and publisher through trusted channels before uploading sensitive or proprietary videos.

What this means

Your uploaded videos, images, or audio may leave your device and be processed by the NemoVideo cloud service.

Why it was flagged

The skill clearly sends user-provided media to an external cloud API for processing. That is central to the purpose, but the artifact does not describe retention, privacy terms, or data handling beyond the API workflow.

Skill content
Drop your video clips in the chat... I'll handle the AI video combining on cloud GPUs... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL.
Recommendation

Upload only media you are comfortable sending to that provider, and check the provider’s privacy and retention policies for sensitive content.