Compressor Ios
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use or create a NemoVideo session token to process videos and check credits/session state.
The skill uses a bearer token or creates an anonymous starter token to access the NemoVideo API. This is expected for the cloud service, but it is still delegated service authority.
If `NEMO_TOKEN` is in the environment, use it directly and create a session. Otherwise, acquire a free starter token... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`
Use a token you are comfortable delegating to this skill, monitor credits if relevant, and avoid sharing the token outside the agent environment.
Uploaded videos, prompts, and generated outputs may be processed and temporarily stored by the NemoVideo backend.
The skill sends user-provided video/media content to a remote backend for processing. This is central to the stated purpose, but it involves sharing potentially private media with a third-party service.
Drop your video files in the chat and tell me what you need. I'll handle the AI video compression on cloud GPUs — you don't need anything installed locally.
Only upload media you are comfortable sending to the external service, and be careful with private or sensitive videos.
The backend may guide the agent to run upload, edit, state, or export calls as part of the compression workflow.
The remote backend can return GUI-like instructions that the agent translates into API actions. The actions appear constrained to the video workflow, but backend-directed tool use is worth noticing.
Backend says | You do | "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Confirm important actions such as exporting or using private files, and review the final output before sharing it.
Users have less independent context for verifying who operates or maintains the service behind the skill.
The skill has limited provenance metadata. There is no local code or install script to inspect, but users must still trust the external NemoVideo service endpoint documented in the skill.
Source: unknown Homepage: none
Install/use the skill only if you trust the publisher and the nemovideo.ai backend it contacts.