Ai Video Editor Hindi

AdvisoryAudited by VirusTotal on Apr 23, 2026.

Overview

Type: OpenClaw Skill Name: ai-video-editor-hindi Version: 1.0.0 The skill acts as a legitimate wrapper for a cloud-based video editing service hosted at nemovideo.ai. It manages authentication via the NEMO_TOKEN environment variable or an anonymous token generation process, and handles video processing tasks (upload, state polling, and rendering) through standard API endpoints. The instructions in SKILL.md are well-defined, focusing on translating backend responses and managing the video editing workflow without any evidence of data exfiltration, unauthorized local execution, or malicious prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can initiate provider-side editing, upload, status, credit, and export workflows for the video-editing session.

Why it was flagged

The skill instructs the agent to automatically set up a cloud session and use API workflows. This is expected for the video-editing purpose, but users should know actions may be performed through the provider API once they invoke the skill.

Skill content
This skill connects to a cloud processing backend. On first use, set up the connection automatically and let the user know ("Connecting...").
Recommendation

Use the skill only for videos you intend to process through the NemoVideo cloud service, and review requested uploads/exports before proceeding.

What this means

The provider token authorizes cloud editing, upload, credit, state, and export operations for the session.

Why it was flagged

The skill uses a provider token, either from the environment or by creating an anonymous token. This is disclosed and purpose-aligned for accessing the video-editing API, with no evidence of token logging or unrelated credential use.

Skill content
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Keep NEMO_TOKEN private, avoid sharing raw logs that may include headers, and rotate or remove the token if you no longer want the skill to use the provider account/session.

What this means

Your uploaded video/audio/image files may leave the local environment and be processed by NemoVideo's cloud backend; exported output is returned via a download URL.

Why it was flagged

The skill sends user-provided media to an external cloud provider for processing. This is central to the advertised service and is disclosed, but media files can contain sensitive personal content.

Skill content
Drop your raw video footage in the chat... I'll handle the AI Hindi video editing on cloud GPUs... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart
Recommendation

Do not upload private, confidential, or legally sensitive footage unless you are comfortable with the provider processing it and have reviewed the provider’s privacy/retention terms.