Edit Video

PassAudited by ClawScan on May 11, 2026.

Overview

This appears purpose-aligned for cloud video editing, with the main caveat that selected media and prompts are sent to NemoVideo’s cloud API using a token/session.

Install only if you are comfortable using NemoVideo’s cloud service for editing. Avoid uploading confidential footage unless you trust the provider, and ask for confirmation before exports or credit-consuming operations.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may perform editing or export API steps as part of the workflow after the remote service responds.

Why it was flagged

The skill instructs the agent to translate backend GUI-style responses into API actions. This is aligned with the video-editing workflow, but it means the agent may act on provider responses rather than only displaying them.

Skill content
"click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Recommendation

Use the skill for explicit video-editing tasks and ask the agent to confirm before exports or any action that could consume credits or produce a final downloadable file.

What this means

The skill can act within the NemoVideo session associated with the token, including checking credits and running render/edit workflows.

Why it was flagged

The skill uses or creates a provider token and session ID for NemoVideo API access. This is expected for a cloud editing service and the artifact says not to print tokens.

Skill content
If `NEMO_TOKEN` environment variable is already set, use it ... Generate a UUID ... response field `data.token` becomes your NEMO_TOKEN ... Save `session_id`
Recommendation

Use a dedicated token if possible, avoid sharing it, and revoke or rotate it if you no longer trust the skill or service.

What this means

Private footage, images, audio, filenames, URLs, and editing prompts may be sent to the external provider for processing.

Why it was flagged

The skill sends user-selected video/media files or URLs to the external NemoVideo API for processing. This is central to the stated cloud-editing purpose and is disclosed.

Skill content
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Only upload media you are comfortable sending to the provider, and review any sensitive or confidential content before using the skill.