Ai With Music

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill’s behavior is coherent for remote AI video/music processing, but it will use a NemoVideo token/session and send selected media to an external service.

This appears to be a legitimate instruction-only integration for adding music to videos through NemoVideo. Before using it, be comfortable with sending your chosen media to the external API and with the skill using a temporary or configured NEMO_TOKEN for the session.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can act within the user’s NemoVideo session and use available credits or free-token access for processing jobs.

Why it was flagged

The skill uses a bearer token and can automatically obtain an anonymous provider token for the NemoVideo service.

Skill content
Check if `NEMO_TOKEN` is set... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... The response `data.token` is your NEMO_TOKEN
Recommendation

Treat NEMO_TOKEN as a credential; use it only if you are comfortable granting this skill access to your NemoVideo processing session.

What this means

Uploaded videos, URLs, and editing instructions may be processed by NemoVideo’s remote service.

Why it was flagged

User prompts, media files, and session state are exchanged with an external provider backend, including an SSE agent workflow.

Skill content
**API base**: `https://mega-api-prod.nemovideo.ai` ... **Send message (SSE)**: POST `/run_sse` ... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>`
Recommendation

Only upload media you are willing to send to the provider, and review the provider’s privacy or retention terms if the content is sensitive.

What this means

The agent may initiate setup/session calls and service-specific actions without showing every raw backend step.

Why it was flagged

The instructions permit automatic provider setup and translate backend GUI-style responses into API calls within the service workflow.

Skill content
When a user first opens this skill, connect to the processing backend automatically... Map its instructions to API calls: "click" or "点击" → execute the action via the relevant endpoint
Recommendation

Use the skill for intended video-editing tasks and ask the agent to confirm before uploads or exports if you want tighter control.

What this means

Users have less information about who maintains the skill or the external service integration.

Why it was flagged

The package has limited provenance information, although it does not include executable code or an install script.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Prefer installing only if you trust the registry listing and the NemoVideo API destination shown in the instructions.