Subtitle Editor Online
AdvisoryAudited by Static analysis on May 6, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your media files leave your local environment and are processed by the NemoVideo cloud service.
The skill sends user-provided media to an external cloud API for processing. This is purpose-aligned, but uploaded videos, images, or audio may contain private information.
`/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL.
Only upload media you are comfortable processing with this external service, and review the provider's privacy/retention terms if the content is sensitive.
The token can authorize actions against the NemoVideo service and may consume available credits or access session state.
The skill uses a bearer token to create sessions, upload files, check credits, and export renders. This is expected for the integrated service, but it is still account/credit-bearing authority.
Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Use a dedicated/scoped Nemo token where possible, avoid sharing it, and rotate or revoke it if you no longer trust the skill.
It may be harder to independently verify who maintains the skill or the external service behavior.
The skill is instruction-only and has no executable install artifacts, but the registry does not provide source or homepage provenance for an external API-backed integration.
Source: unknown; Homepage: none
Install only if you trust the listed skill owner and the nemovideo.ai service, especially before uploading sensitive media.