Adobe Video Editing

• Outcome: Review
• Latest audit: May 29, 2026 at 9:34 PM UTC
• Version:
  1.0.0

Overview

This is a cloud video-editing skill, but it uses Adobe branding while automatically connecting to NemoVideo and routing user media and prompts to that third-party service.

Review before installing. Use this only if you are comfortable sending videos, media URLs, editing prompts, session metadata, and token-authenticated requests to NemoVideo. Avoid confidential, proprietary, regulated, or client footage unless you trust that provider and understand its privacy and retention terms.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 85% confidence
• Finding: The invocation examples are generic enough that ordinary phrases like 'export', 'upload', or 'edit my raw video footage' could trigger the skill unintentionally. In a skill that uploads user media and contacts a remote backend, accidental activation increases the chance of unintended data transfer or actions being taken without clear user intent.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill processes uploaded video through a third-party cloud backend, but the user warning is not sufficiently prominent at the point where users are encouraged to share footage. This can mislead users about where sensitive media is sent and creates a privacy risk, especially for personal, internal, or confidential recordings.

VirusTotal

65/65 vendors flagged this skill as clean.