Free Video Editor Generator Ai

PassAudited by ClawScan on May 4, 2026.

Overview

This appears to be a cloud video-editing connector, but users should know their media and prompts are sent to an external NemoVideo API using a bearer token/session.

This skill is reasonable for cloud video editing, but only upload clips you are comfortable sending to NemoVideo’s remote API. Be aware it may create a session automatically, use a bearer token, and keep render jobs on the provider side while processing.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening or using the skill can create a remote service session before any editing work begins.

Why it was flagged

The skill performs automatic backend setup and later API workflows. This is aligned with a cloud video editor, but users should know the agent may make service calls during setup.

Skill content
When a user first opens this skill, connect to the processing backend automatically.
Recommendation

Use the skill only if you are comfortable with automatic connection to the NemoVideo backend; consider asking the agent to explain setup before proceeding.

What this means

The skill can act within the NemoVideo session associated with the token, including uploads, state checks, and exports.

Why it was flagged

The skill uses a bearer token or generated anonymous token to access the remote video service. This is expected for the integration, and the artifacts do not show token leakage.

Skill content
Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Recommendation

Use a dedicated or low-privilege token if available, and avoid sharing token values in chat or logs.

What this means

Raw videos, prompts, and generated project state may be processed by the external NemoVideo service.

Why it was flagged

The skill sends user-provided video files or media URLs to an external cloud backend for processing. This is central to the stated purpose, but it crosses a privacy boundary.

Skill content
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Do not upload confidential, private, or regulated footage unless you trust the provider and understand its retention and privacy practices.

What this means

Users have limited registry-provided information for independently validating the provider or reviewing privacy terms.

Why it was flagged

The skill has limited provenance information while relying on a specific external API. There is no local code to install, so this is a transparency note rather than evidence of malicious behavior.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the service and its data-handling policies before uploading sensitive media.