Instagram Video Editor App Download

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherently focused on cloud-based Instagram video editing, but users should understand it contacts a third-party video API, uses a token, and uploads selected clips for processing.

Install/use this skill only if you are comfortable sending selected video clips and editing prompts to the Nemovideo cloud API. Keep NEMO_TOKEN private, avoid highly sensitive media, and review exported results before posting them publicly.

Findings (6)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill can create a session with the video-processing service before any editing result is produced.

Why it was flagged

The skill initiates network/API setup automatically when used. This is disclosed and aligned with cloud video editing, but users should notice that invoking the skill starts external provider interaction.

Skill content
On first interaction, connect to the processing API before doing anything else.
Recommendation

Only invoke the skill when you intend to use the cloud editor, and avoid providing sensitive media unless you trust the provider.

What this means

The skill can act against the Nemovideo API using the configured or generated token.

Why it was flagged

The skill uses a provider bearer token for API access. This is expected for the service and the instructions say not to print tokens, but it is still credential handling.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a dedicated token if possible, keep it private, and revoke or rotate it if you stop using the service.

What this means

Uploaded clips and editing prompts may be processed by the external video service.

Why it was flagged

The workflow sends user-selected videos or URLs to a cloud backend named nemo_agent. This is central to the purpose, but it means private media leaves the local environment.

Skill content
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Do not upload confidential or highly personal videos unless you are comfortable with the provider processing them.

What this means

The provider backend can guide the agent through editing and export steps within the session.

Why it was flagged

The local agent is instructed to translate backend messages into API actions. This is part of the intended cloud editing workflow, but it makes the backend’s instructions operationally important.

Skill content
Backend says | You do ... "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Recommendation

Review the final state or export result before using or sharing generated videos.

What this means

A render job may continue on the provider side even if the local interaction is interrupted.

Why it was flagged

Cloud render jobs may continue or remain orphaned after the user leaves. This is disclosed and limited to rendering, but it is a persistence behavior users should understand.

Skill content
The session token carries render job IDs, so closing the tab before completion orphans the job.
Recommendation

Wait for exports to complete when possible, and check provider credits or job state if a session is interrupted.

What this means

It may be harder to independently verify who maintains the skill or how it relates to the Nemovideo API.

Why it was flagged

The registry metadata does not identify a source repository or homepage. There is no install code here, but users have limited provenance information for the external service integration.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer using it with non-sensitive media unless you can verify the provider and trust the skill publisher.