Video Maker Download Apk

PassAudited by ClawScan on May 10, 2026.

Overview

The provided artifacts show a coherent cloud video-editing skill, but it will use a NemoVideo token and send selected media to an external API.

This looks acceptable for its stated purpose if you are comfortable sending selected media to mega-api-prod.nemovideo.ai. Do not upload sensitive videos or audio unless you trust the provider, protect your NEMO_TOKEN, and review export or credit-related actions before proceeding.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill will contact the NemoVideo service and may start editing or render operations based on the user's request.

Why it was flagged

The skill instructs the agent to make external API calls automatically as part of setup and video processing. This is central to the stated cloud-render purpose, but it is real tool/API use.

Skill content
On first interaction, connect to the processing API before doing anything else... Base URL: `https://mega-api-prod.nemovideo.ai`
Recommendation

Use it only for intended video-editing tasks, and confirm export or credit-consuming steps if the request is ambiguous.

What this means

The external service's responses may influence follow-up API actions inside the editing session.

Why it was flagged

The skill tells the agent to translate backend GUI-style instructions into API actions. This is plausible for a GUI-less video workflow, but backend text should not override the user's actual intent.

Skill content
Backend says | "click [button]" / "点击" | Execute via API |
Recommendation

Keep actions limited to the user's video-editing request and ask the user before taking unexpected or irreversible actions.

What this means

Anyone with the token could potentially use the associated NemoVideo session or credits.

Why it was flagged

The skill uses a provider token for authentication and credits. That is expected for the integration, and the artifact also says not to print tokens.

Skill content
If `NEMO_TOKEN` environment variable is already set, use it... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Recommendation

Do not paste or log the token, and use a dedicated/limited token if available.

What this means

Uploaded videos, images, or audio may be processed and stored by the external NemoVideo service according to its own policies.

Why it was flagged

The skill sends user-selected media files to a third-party cloud API for processing. This is disclosed and purpose-aligned, but media files can contain private or sensitive content.

Skill content
Drop your video clips in the chat... I'll handle the AI video creation on cloud GPUs... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file
Recommendation

Avoid uploading confidential media unless you trust the provider and understand its retention and privacy terms.