Video Maker Linkedin

ReviewAudited by ClawScan on May 3, 2026.

Overview

This appears to be a coherent cloud video-rendering skill, but it sends user media and prompts to NemoVideo and uses or creates a Nemo API token.

Install only if you are comfortable sending selected clips, headshots, screen recordings, and prompts to `mega-api-prod.nemovideo.ai`. Use a limited Nemo token where possible, avoid confidential media, and confirm any export or credit-impacting step.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can act within the NemoVideo service using the supplied or generated token.

Why it was flagged

The skill uses a Nemo provider token for sessions and render requests. This is expected for the video service, but it gives the skill provider-session and potential credit/account authority.

Skill content
If `NEMO_TOKEN` is in the environment, use it directly and create a session... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Recommendation

Use a scoped token if available, monitor credits or subscription impact, and avoid sharing the token outside the intended environment.

What this means

Uploaded files, prompts, render state, and generated media may leave the local environment and be processed by NemoVideo.

Why it was flagged

The skill clearly discloses that user media and instructions are sent to an external cloud rendering backend. This is purpose-aligned, but screen recordings and headshots can contain sensitive personal or business data.

Skill content
This tool takes your video clips or images and runs AI video creation through a cloud rendering pipeline... API base: `https://mega-api-prod.nemovideo.ai`
Recommendation

Do not upload confidential screen recordings, private documents, or sensitive images unless you are comfortable with NemoVideo processing them.

What this means

Some video-service actions may be performed based on backend responses rather than separate step-by-step user prompts.

Why it was flagged

The skill instructs the agent to convert backend UI-style responses into follow-up API actions. This is part of the intended integration, but it means external backend messages can steer the workflow inside the video session.

Skill content
Backend Response Translation... "click [button]" / "点击" | Execute via API
Recommendation

Keep API actions limited to the current user-requested video task, and confirm any action that could spend credits, publish content, or expose additional files.