Subtitle Generator Davinci

PassAudited by ClawScan on May 3, 2026.

Overview

The skill is a coherent cloud video-subtitling workflow, but users should know their media and prompts are sent to NemoVideo and a service token is used.

This appears safe for its stated purpose, but it is not an offline subtitle tool. Before installing or invoking it, be comfortable with sending your video/audio/image files and edit instructions to the NemoVideo cloud service, and keep the NEMO_TOKEN private.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Invoking the skill may contact the NemoVideo API and start a processing session without a separate manual setup step.

Why it was flagged

The skill directs the agent to make network calls and create a backend session automatically when invoked. This is aligned with the cloud-rendering purpose, but users should be aware it contacts an external service.

Skill content
On first use, set up the connection automatically and let the user know ("Connecting...").
Recommendation

Only invoke the skill when you are ready to use the external cloud service; consider asking the agent to confirm before uploading files.

What this means

The token can authorize service usage, render jobs, and credits for this backend.

Why it was flagged

The skill requires a Bearer token for the NemoVideo service. This credential use is expected for the integration and the artifact instructs not to expose tokens.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Store NEMO_TOKEN securely, do not paste it into public chats, and rotate or replace it if exposed.

What this means

Private or sensitive videos, audio, images, and descriptions may leave the local device and be processed by the cloud backend.

Why it was flagged

User media files and editing prompts are sent to an external provider for processing. This is central to the skill's purpose, but it is privacy-relevant.

Skill content
This tool takes your video clips and runs subtitle generation through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Use this only for media you are comfortable uploading to NemoVideo, and review the provider's privacy and retention practices if the content is sensitive.