Notes Of Video
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use the configured NemoVideo token or anonymous credits to create sessions and run processing jobs.
The skill uses a bearer token or anonymous token to create service sessions and spend service credits, which is expected for the stated cloud workflow but is still account/session authority.
If `NEMO_TOKEN` is in the environment, use it directly and create a session. Otherwise, acquire a free starter token
Only provide a token for an account you intend to use with this service, monitor credit usage, and revoke or rotate the token if you no longer need it.
Meeting or lecture recordings may contain private information that will leave the local environment for cloud processing.
User-provided videos are sent to an external cloud service for processing. This is disclosed and aligned with the skill purpose, but the artifacts do not describe retention or privacy controls.
This tool takes your video files and runs AI note extraction through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Avoid uploading confidential recordings unless you are comfortable with NemoVideo processing them and have reviewed any applicable service terms or privacy policy.
The agent may carry out service-side workflow steps such as export based on backend responses during a requested video task.
The skill tells the agent to translate backend UI-style messages into API actions, including export. This is coherent for the cloud rendering workflow, but backend-driven actions can consume credits or generate outputs without the user seeing every technical step.
Backend says | You do ... "Export button" / "导出" | Execute export workflow
If credit use or exports matter, ask the agent to confirm before exporting or spending credits.
It may be harder to independently verify who operates the backend service before using it.
The skill has limited public provenance metadata. There is no local code or install script in the provided artifacts, so this is a verification note rather than a behavioral concern.
Source: unknown; Homepage: none
Install only if you trust the listed skill owner and the NemoVideo backend domain used by the instructions.