Video Maker Guru Free

PassAudited by ClawScan on May 5, 2026.

Overview

The skill is coherent for cloud video editing, but it sends prompts and media to NemoVideo’s cloud and uses or creates a token, so users should only upload content they are comfortable sharing.

This skill appears purpose-aligned, but treat it as a third-party cloud video editor: review the provider before installing, avoid uploading sensitive media, understand token and credit limits, and confirm any export or upgrade steps before proceeding.

Findings (6)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Videos, audio, images, URLs, and editing instructions may be processed by a third-party provider.

Why it was flagged

The skill sends user prompts and uploaded media to an external cloud video service.

Skill content
**API base**: `https://mega-api-prod.nemovideo.ai` ... **Send message (SSE)**: POST `/run_sse` ... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>`
Recommendation

Only upload media you intend to share with NemoVideo, and avoid sensitive or confidential footage unless you trust that provider's privacy practices.

What this means

The agent may act under a NemoVideo token and may consume credits or create cloud sessions tied to that token.

Why it was flagged

The skill uses an existing provider token or creates an anonymous token to authorize sessions and rendering actions.

Skill content
If `NEMO_TOKEN` is in the environment, use it directly ... Otherwise, acquire a free starter token ... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`
Recommendation

Use a scoped or disposable token where possible, and monitor any credits or account activity associated with the service.

What this means

If backend instructions are over-trusted, the agent could perform service actions that were not clearly requested by the user.

Why it was flagged

Backend responses can direct the agent to perform follow-up API actions.

Skill content
The backend responds as if there's a visual interface. Map its instructions to API calls: ... `click` ... → execute the action via the relevant endpoint
Recommendation

Keep backend-directed actions limited to the current user-requested video workflow and ask before uploads, exports, purchases, or other impactful actions.

What this means

A user may expect the workflow to be entirely free, then encounter credit, registration, or subscription limitations after uploading or editing media.

Why it was flagged

The skill is framed as free, but the instructions also describe credit limits and possible registration or upgrade requirements.

Skill content
`**Export** (free, no credits)` ... `402 | Free plan export blocked | ... Register or upgrade your plan to unlock export.`
Recommendation

Clearly disclose credit limits, token expiration, and any upgrade requirements before the user invests time or uploads content.

What this means

Users have less provenance information when deciding whether to trust a skill that handles media uploads and provider tokens.

Why it was flagged

The registry metadata does not provide a verifiable source or homepage for the skill.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer skills with clear publisher identity, documentation, and a privacy policy, especially for cloud processing of personal media.

What this means

A render may continue server-side or become inaccessible if the session is interrupted.

Why it was flagged

Cloud render jobs may continue or become detached from the local session if the user leaves before completion.

Skill content
The session token carries render job IDs, so closing the tab before completion orphans the job.
Recommendation

Wait for renders to complete when possible, and the skill should provide clear status or cancellation guidance for long-running jobs.