Best Video Editor Free
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill can create a remote anonymous token and session with the Nemo backend before editing begins.
The skill tells the agent to automatically contact the external service and create a session. This is central to cloud video editing and is disclosed, but it is still an automatic network action users should notice.
On first use, set up the connection automatically... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token` ... POST `https://mega-api-prod.nemovideo.ai/api/tasks/me/with-session/nemo_agent`
Use the skill only when you are comfortable connecting to the Nemo cloud service; avoid invoking it for private projects unless you trust that backend.
Anyone with the token could potentially use the associated Nemo service access or credits.
The skill uses a bearer token to authorize all cloud API requests. That is expected for this integration, but the token may represent credits, sessions, or account access.
Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Use a dedicated Nemo token if possible, keep it out of shared logs, and rotate it if you suspect it was exposed.
Your uploaded videos and editing instructions are processed by an external provider rather than staying only on your machine.
The skill sends user-selected video files to a remote cloud processing backend. This matches the stated purpose, but videos can contain personal or sensitive content.
Upload MP4, MOV, AVI, WebM files up to 500MB... All rendering happens server-side.
Do not upload confidential, regulated, or highly personal footage unless you trust the provider and understand its data handling terms.
A render job might keep running or become difficult to recover if you interrupt the session.
Render work can continue or become hard to track on the backend if the client session is closed. This is disclosed and scoped to rendering, but it affects user control over jobs and credits.
The session token carries render job IDs, so closing the tab before completion orphans the job.
Wait for exports to finish when possible, and keep track of session or render identifiers if the service exposes them.
You have less external information to assess who operates the service before sending videos to it.
The artifact does not provide a source repository or homepage, which makes it harder to independently verify the publisher or cloud service provenance.
Source: unknown; Homepage: none
Verify that `mega-api-prod.nemovideo.ai` is the provider you intend to use before uploading sensitive media.