Generator Downfall
PassAudited by ClawScan on May 3, 2026.
Overview
This appears to be a disclosed cloud video-clipping skill, but it uses a Nemo token and uploads user videos to Nemo's API for processing.
This skill looks purpose-aligned and not malicious from the provided artifacts. Before installing, make sure you are comfortable sending clips to Nemo's cloud API and using a Nemo token or anonymous starter token for rendering and exports.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill can initiate cloud processing actions and may consume service credits when rendering or exporting.
The skill instructs the agent to translate user requests into backend API operations. This is expected for the cloud video-editing purpose, but users should understand that requests may trigger uploads, renders, polling, and exports.
User prompts ... get routed to the corresponding action ... Upload ... Credits ... State ... Export ... Everything else ... SSE
Use it for intended video-editing tasks and confirm before uploading or exporting sensitive or costly jobs.
The skill can act through the configured Nemo token or an anonymous starter token, including checking credits and starting render jobs.
The skill uses an authentication token to create sessions and call the Nemo service. This is disclosed and purpose-aligned, with no evidence of token logging or unrelated use.
If `NEMO_TOKEN` is in the environment, use it directly and create a session. Otherwise, acquire a free starter token ... All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Use a token intended for this service, avoid sharing the token in chat, and review any credit or account implications before heavy use.
Videos, audio, images, prompts, and generated draft state may be transmitted to the Nemo backend, which could matter for confidential or regulated footage.
The artifacts disclose that uploaded media is sent to an external cloud backend for processing. This is central to the skill's purpose, but retention, provider handling, and confidentiality terms are not described in the provided text.
Drop your video clips in the chat ... I'll handle the AI failure detection on cloud GPUs ... All calls go to `https://mega-api-prod.nemovideo.ai`
Only upload media you are comfortable sending to the external service, and check the provider's privacy or retention terms for sensitive recordings.