Deevid Ai
ReviewAudited by ClawScan on May 16, 2026.
Overview
Deevid AI is a coherent cloud video-editing connector, but it sends selected media and prompts to NemoVideo and uses a bearer token or anonymous session.
This skill appears purpose-aligned and not malicious based on the provided artifacts. Before installing, make sure you are comfortable sending selected media and prompts to NemoVideo, protect your NEMO_TOKEN, and avoid uploading confidential videos unless the provider's privacy and retention terms meet your needs.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill may create a remote session and run cloud editing or rendering steps as part of normal operation.
The skill is designed to initiate remote setup and then chain session, upload, edit, polling, and export API calls. This is expected for cloud video editing, but users should notice that invoking the skill starts provider-side workflow activity.
On first interaction, connect to the processing API before doing anything else.
Use it when you intend to process media through the remote service, and confirm uploads/exports before sending sensitive or large files.
The token authorizes access to the NemoVideo service and may be tied to credits, sessions, or account state.
The skill uses a bearer credential or generated anonymous token for the stated video-processing API. The artifact also explicitly says not to print tokens, which is appropriate handling.
If `NEMO_TOKEN` environment variable is already set, use it ... Include `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Use a dedicated token where possible, keep it out of transcripts and logs, and rotate it if it is exposed.
Videos, images, audio, URLs, and editing instructions you provide may leave your device and be processed by the NemoVideo service.
The workflow sends user-selected media files and edit prompts to an external provider for server-side processing. This is central to the skill's purpose and is disclosed.
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"` ... All rendering happens server-side.
Upload only files you are comfortable sending to the provider, and review the provider's privacy/retention terms for sensitive or confidential media.
