Video Ai Japanese
PassAudited by ClawScan on May 11, 2026.
Overview
The skill is a coherent cloud video-captioning integration, but users should expect selected media and editing prompts to be sent to NemoVideo using a NEMO token.
Before installing, decide whether you are comfortable sending selected videos and edit instructions to https://mega-api-prod.nemovideo.ai using a NEMO_TOKEN or anonymous token. Avoid confidential media unless you trust that service, and keep the token private.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Videos or media files the user provides may be sent to the external NemoVideo service for processing.
The skill can upload user-selected media files to a remote API, which is central to its stated video-processing purpose but still important for users to understand.
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Use the skill only with files you are comfortable uploading to the stated cloud service, especially if the videos contain private or sensitive content.
The skill will act through the configured or generated NemoVideo token for API sessions, uploads, credits, state, and rendering.
The skill uses a bearer token for the NemoVideo API. This is expected for the integration, and the artifact also instructs not to print tokens.
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Keep NEMO_TOKEN private, use the least-privileged/token source intended for this service, and revoke or rotate it if it is exposed.
User prompts, selected media, and project state may be exchanged with the disclosed external provider during processing.
The skill discloses the external provider API used for session creation, SSE messages, uploads, state checks, credits, and exports.
API base: `https://mega-api-prod.nemovideo.ai`
Review whether this provider is acceptable for your content, and avoid submitting confidential videos unless you trust the service and its data handling.
The remote service can guide the agent to perform editing/export actions within the active video session.
The skill tells the agent to convert some backend GUI-style messages into API actions. This is purpose-aligned for controlling the cloud editor, but it means provider responses influence workflow steps.
Backend says | You do ... `"Export button" / "导出"` | `Execute export workflow`
Confirm important outputs before using or sharing them, and be cautious if backend-driven actions do not match your requested edit.
Users have limited registry-provided provenance information before sending media to the disclosed external service.
The registry metadata does not provide a source or homepage for independently verifying the publisher or service, although no executable code or install dependency is present.
Source: unknown; Homepage: none
Verify the service and publisher through other trusted channels before uploading sensitive content.