Notes Of Video
PassAudited by VirusTotal on May 3, 2026.
Overview
Type: OpenClaw Skill Name: notes-of-video Version: 1.0.0 The skill is a legitimate integration for a video processing and summarization service hosted at nemovideo.ai. It defines a clear workflow for session management, file uploads, and video rendering using standard REST and SSE (Server-Sent Events) protocols. The instructions in SKILL.md are focused on guiding the AI agent through the service's API, and the requested environment variables (NEMO_TOKEN) and configuration paths (~/.config/nemovideo/) are strictly scoped to the tool's functionality without any signs of data exfiltration or malicious intent.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use the configured NemoVideo token or anonymous credits to create sessions and run processing jobs.
The skill uses a bearer token or anonymous token to create service sessions and spend service credits, which is expected for the stated cloud workflow but is still account/session authority.
If `NEMO_TOKEN` is in the environment, use it directly and create a session. Otherwise, acquire a free starter token
Only provide a token for an account you intend to use with this service, monitor credit usage, and revoke or rotate the token if you no longer need it.
Meeting or lecture recordings may contain private information that will leave the local environment for cloud processing.
User-provided videos are sent to an external cloud service for processing. This is disclosed and aligned with the skill purpose, but the artifacts do not describe retention or privacy controls.
This tool takes your video files and runs AI note extraction through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Avoid uploading confidential recordings unless you are comfortable with NemoVideo processing them and have reviewed any applicable service terms or privacy policy.
The agent may carry out service-side workflow steps such as export based on backend responses during a requested video task.
The skill tells the agent to translate backend UI-style messages into API actions, including export. This is coherent for the cloud rendering workflow, but backend-driven actions can consume credits or generate outputs without the user seeing every technical step.
Backend says | You do ... "Export button" / "导出" | Execute export workflow
If credit use or exports matter, ask the agent to confirm before exporting or spending credits.
It may be harder to independently verify who operates the backend service before using it.
The skill has limited public provenance metadata. There is no local code or install script in the provided artifacts, so this is a verification note rather than a behavioral concern.
Source: unknown; Homepage: none
Install only if you trust the listed skill owner and the NemoVideo backend domain used by the instructions.