Ai Video Editor Agent
AdvisoryAudited by Static analysis on May 4, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill may create a session with the video service and later consume credits for editing or export actions.
The skill instructs the agent to make an external API connection automatically when used. This is expected for a cloud video editor, but users should notice that invoking the skill starts remote-service activity.
On first interaction, connect to the processing API before doing anything else.
Invoke the skill only when you are comfortable connecting to the external service, and ask for confirmation before exporting if credit use matters.
Anyone with the token could potentially use the associated video-processing credits or account/session access.
The skill uses a bearer token for the external video API. This is purpose-aligned, but the token may control credits and service access.
Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Use a dedicated, revocable token where possible, avoid exposing it in logs or chat, and monitor credit usage.
Private or confidential video footage may leave the local environment and be processed by the external service.
The skill sends user-provided video files and editing prompts to an external provider for cloud processing. This is central to the stated purpose, but the artifacts do not describe retention or privacy controls.
Drop your raw video footage in the chat ... All calls go to `https://mega-api-prod.nemovideo.ai` ... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>`
Do not upload sensitive footage unless you trust the provider and understand its privacy, retention, and deletion policies.
Users have less independent information for validating who maintains the skill and how the service is operated.
The registry metadata does not provide a source repository or homepage for verifying the publisher or external service integration.
Source: unknown; Homepage: none
Prefer installing only if you trust the listed publisher/service, and verify the provider separately before uploading important media.