Deevid Ai

ReviewAudited by ClawScan on May 16, 2026.

Overview

Deevid AI is a coherent cloud video-editing connector, but it sends selected media and prompts to NemoVideo and uses a bearer token or anonymous session.

This skill appears purpose-aligned and not malicious based on the provided artifacts. Before installing, make sure you are comfortable sending selected media and prompts to NemoVideo, protect your NEMO_TOKEN, and avoid uploading confidential videos unless the provider's privacy and retention terms meet your needs.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may create a remote session and run cloud editing or rendering steps as part of normal operation.

Why it was flagged

The skill is designed to initiate remote setup and then chain session, upload, edit, polling, and export API calls. This is expected for cloud video editing, but users should notice that invoking the skill starts provider-side workflow activity.

Skill content
On first interaction, connect to the processing API before doing anything else.
Recommendation

Use it when you intend to process media through the remote service, and confirm uploads/exports before sending sensitive or large files.

What this means

The token authorizes access to the NemoVideo service and may be tied to credits, sessions, or account state.

Why it was flagged

The skill uses a bearer credential or generated anonymous token for the stated video-processing API. The artifact also explicitly says not to print tokens, which is appropriate handling.

Skill content
If `NEMO_TOKEN` environment variable is already set, use it ... Include `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Recommendation

Use a dedicated token where possible, keep it out of transcripts and logs, and rotate it if it is exposed.

What this means

Videos, images, audio, URLs, and editing instructions you provide may leave your device and be processed by the NemoVideo service.

Why it was flagged

The workflow sends user-selected media files and edit prompts to an external provider for server-side processing. This is central to the skill's purpose and is disclosed.

Skill content
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"` ... All rendering happens server-side.
Recommendation

Upload only files you are comfortable sending to the provider, and review the provider's privacy/retention terms for sensitive or confidential media.