No Generator
PassAudited by ClawScan on May 12, 2026.
Overview
This is a coherent cloud video-editing skill, but users should understand that it uses a NemoVideo token and uploads selected media to an external processing API.
Before installing, confirm you are comfortable sending selected video, image, or audio files to NemoVideo’s cloud API and using a NEMO_TOKEN for authentication. The artifacts do not show hidden code, unrelated credential use, or destructive behavior.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may initiate a provider session and use the video-editing service as part of normal operation.
The skill directs the agent to make a network setup call automatically at first use. This is disclosed and aligned with the cloud editing purpose, but users should know the agent will contact the provider before editing begins.
On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".
Use this skill only if you are comfortable with automatic setup calls to the NemoVideo API, and ask the agent to confirm before uploads or exports if you want tighter control.
Whoever runs the skill grants it access to the NemoVideo account or anonymous token credits associated with NEMO_TOKEN.
The skill uses a bearer token to authenticate to the stated video-processing provider. This is expected for the integration, and the artifact also says not to print tokens or raw JSON.
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`, `X-Skill-Source`, `X-Skill-Version`, `X-Skill-Platform`.
Provide only a NemoVideo token intended for this service, avoid sharing broader credentials, and revoke or rotate the token if you no longer use the skill.
Videos, images, or audio you choose to process may be uploaded to NemoVideo’s cloud service.
The skill sends user-selected media files or URLs to an external cloud API for processing. This is central to the stated cloud video-editing purpose and is clearly disclosed.
All calls go to `https://mega-api-prod.nemovideo.ai`... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Upload only media you are allowed to share with the provider, especially if clips contain private people, confidential business material, or copyrighted content.