Ai Video Editor Job Remote

PassAudited by VirusTotal on May 4, 2026.

Overview

Type: OpenClaw Skill Name: ai-video-editor-job-remote Version: 1.0.0 The skill provides a functional interface for a cloud-based AI video editing service hosted at mega-api-prod.nemovideo.ai. It includes standard procedures for session management, file uploads, and video rendering, and it explicitly instructs the agent not to expose API tokens or raw output to the user. No indicators of malicious intent, data exfiltration, or unauthorized system access were found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less information about who maintains the skill or where to verify the service.

Why it was flagged

The skill has limited provenance information, although it is instruction-only and no local install code is supplied.

Skill content
Source: unknown; Homepage: none
Recommendation

Install only if you trust the publisher and are comfortable using the referenced nemovideo.ai backend.

What this means

The agent may contact the cloud service and create a session as part of normal use.

Why it was flagged

The skill directs the agent to initiate external API setup automatically; this is aligned with cloud editing but should be visible to the user.

Skill content
On first use, set up the connection automatically and let the user know ("Connecting...").
Recommendation

Use the skill only when you intend to process media through the remote service, and review any network/API prompts your agent surfaces.

What this means

Anyone with the token may be able to use the associated service credits or session authority.

Why it was flagged

The skill uses a bearer token for the video-editing service. This is expected for the backend, but it is still account/credit-bearing authority.

Skill content
All requests must include: Authorization: Bearer <NEMO_TOKEN>
Recommendation

Use a dedicated token when possible, do not paste it into unrelated chats, and rotate it if it is exposed.

What this means

Screen recordings or project walkthroughs could contain private files, credentials, customer data, or business information that will leave the local environment.

Why it was flagged

User-provided footage is intended to be sent to an external cloud backend for processing, which is central to the skill but may involve sensitive content.

Skill content
Share your raw video footage and I'll get started on AI video editing... This skill connects to a cloud processing backend.
Recommendation

Review or redact sensitive footage before uploading, and avoid using the skill for confidential material unless you trust the service's data handling.

What this means

A render may continue consuming time or credits even if you stop watching the session.

Why it was flagged

Render jobs can continue or become unmanaged on the cloud backend after the local session is interrupted.

Skill content
The session token carries render job IDs, so closing the tab before completion orphans the job.
Recommendation

Monitor exports until completion and check service credits/status if a session is interrupted.