Video Search

PassAudited by ClawScan on May 11, 2026.

Overview

This appears to be a straightforward cloud video-search integration, but it will contact Nemovideo and send chosen media or prompts there using a NEMO token.

This skill is reasonable to install if you want cloud-based video search and editing. Before using it, make sure you are comfortable sending selected videos, audio, images, and prompts to Nemovideo, and keep your NEMO_TOKEN private.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening the skill may create a Nemovideo backend session before any video is uploaded.

Why it was flagged

The skill initiates a cloud API session automatically on first use. This is disclosed and aligned with the service, but it is still autonomous network activity the user should understand.

Skill content
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Recommendation

Use the skill only if you are comfortable with it contacting the Nemovideo backend during setup; ideally the agent should clearly notify the user before doing so.

What this means

The token may authorize use of credits or access to the user's Nemovideo session.

Why it was flagged

The skill uses a bearer token, and can obtain an anonymous token if one is not already set. This is expected for the API integration, with no evidence of hardcoding or unrelated credential use.

Skill content
All requests must include: `Authorization: Bearer <NEMO_TOKEN>` ... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token` ... The response `data.token` is your NEMO_TOKEN
Recommendation

Keep NEMO_TOKEN private, avoid sharing logs containing it, and revoke or rotate it if it is exposed.

What this means

Private or confidential media uploaded through the skill may be processed by Nemovideo's cloud service.

Why it was flagged

The workflow sends user-selected videos, media URLs, and prompts to an external cloud provider for processing. This is central to the skill's purpose and is disclosed.

Skill content
Drop your video library in the chat ... I'll handle the AI content search on cloud GPUs ... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL.
Recommendation

Only upload videos and audio you are allowed to send to this provider, and review the provider's privacy and retention terms for sensitive content.