Add Subtitle To Video App

• Analyzed: May 11, 2026, 8:21 PM
• Findings: 1
• Version: 1.0.0
• Hash: 8cd5342d902f59160f08ac97888eda5839bb6fc87e8e7dd5c6386629f507fecc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill in SKILL.md requires high-risk capabilities including external network communication and file uploads to a third-party backend (mega-api-prod.nemovideo.ai). It also includes logic to automatically acquire and store authentication tokens in the local filesystem (~/.config/nemovideo/) and environment variables. While these behaviors are aligned with the stated purpose of cloud-based video captioning, the automated data transmission to a remote endpoint and credential handling are significant risk factors according to the defined criteria.