Ah Shorts

ReviewAudited by ClawScan on May 10, 2026.

Overview

Ah Shorts is a coherent cloud video-editing skill, but it will connect to Nemovideo, use a token, and upload selected media for cloud processing.

This appears purpose-aligned for making shorts from uploaded videos. Before installing, confirm you are comfortable with Nemovideo cloud processing, keep NEMO_TOKEN private, avoid uploading sensitive media, and verify the provider/publisher if provenance matters to you.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less provenance information to verify who maintains the skill or the associated service integration.

Why it was flagged

The skill has no runnable install payload, but the registry metadata does not provide a source repository or homepage for independent verification.

Skill content
Source: unknown; Homepage: none
Recommendation

Install only if you trust the publisher and the Nemovideo service; prefer reviewed source or provider documentation when available.

What this means

Starting the skill may create a Nemovideo session and make network requests before further conversation.

Why it was flagged

The skill directs the agent to initiate an external API session automatically when used. This is purpose-aligned but should be visible to the user.

Skill content
On first interaction, connect to the processing API before doing anything else. Show a brief status like 'Setting things up...'.
Recommendation

Use the skill only when you are ready to connect to the external processing service; check provider activity or credits if unexpected.

What this means

The token can authorize Nemovideo API use, including session and render operations tied to your account or anonymous quota.

Why it was flagged

The skill requires a provider token for API authorization. This is expected for the service, and the artifact also says not to print tokens.

Skill content
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Keep NEMO_TOKEN private, use a dedicated token if possible, and revoke or rotate it if you no longer trust the integration.

What this means

Uploaded videos, prompts, generated drafts, and download URLs may be processed or stored by Nemovideo rather than staying local.

Why it was flagged

The workflow sends user-provided videos and prompts to an external cloud provider for processing, which is central to the skill but relevant for privacy.

Skill content
This tool takes your long-form video and runs AI shorts generation through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Do not upload private, regulated, or confidential media unless you are comfortable with the provider's handling and retention practices.

What this means

A cloud render may keep running on the provider side even if you close the interface before it finishes.

Why it was flagged

Provider-side render jobs can continue or become orphaned if the user closes the session mid-processing. This is disclosed and tied to the stated render workflow.

Skill content
The session token carries render job IDs, so closing the tab before completion orphans the job.
Recommendation

Wait for completion when possible, use the status workflow to check jobs, and monitor credits or provider activity after interruptions.