Video Best

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 23, 2026, 2:52 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions are consistent with a cloud-based video-enhancement service; nothing in the package suggests hidden capabilities, but it will upload user videos and obtain/use an API token from an external backend — review privacy before sending sensitive footage.

This skill is coherent for a cloud video-enhancement tool, but it will upload whatever media you give it to an external backend (mega-api-prod.nemovideo.ai) and will create or use an API token (NEMO_TOKEN). Before installing/using: 1) Do not upload sensitive or confidential footage unless you trust the service and have reviewed its privacy/security policy. 2) If you don't already have a NEMO_TOKEN, the skill will generate an anonymous token valid for 7 days — consider using a disposable account/token if you want separation from other services. 3) The metadata claims a config path (~/.config/nemovideo/) but the instructions don't use it — confirm where tokens/session IDs are stored (in-memory vs disk). 4) Verify the backend hostname and its TLS/certificate expectations if you need organizational compliance. 5) If you prefer tighter control, avoid granting long-lived credentials to the skill and consider using short-lived/disposable credentials or running uploads through an intermediary you control.