Editor Content

ReviewAudited by ClawScan on May 11, 2026.

Overview

This instruction-only video editing skill is coherent with its purpose, but it sends selected videos and prompts to an external NemoVideo cloud API using a token.

Before installing, confirm you are comfortable using NemoVideo's cloud service for your clips. Do not upload private or sensitive videos unless you trust the provider, and keep the NEMO_TOKEN secret.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may start a remote NemoVideo session and interact with the provider API before detailed editing begins.

Why it was flagged

The skill instructs the agent to automatically contact the remote processing API and create a session at first use. This is disclosed and aligned with cloud video editing, but it is still autonomous network activity.

Skill content
On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".
Recommendation

Install only if you are comfortable with automatic connection to the NemoVideo cloud service when invoking the skill.

What this means

Anyone with access to the token could potentially use the associated NemoVideo credits or session access.

Why it was flagged

The skill uses a bearer token for the NemoVideo API. This credential use is expected for the stated service, and the instructions also say not to print tokens.

Skill content
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`, `X-Skill-Source`, `X-Skill-Version`, `X-Skill-Platform`.
Recommendation

Use a dedicated NemoVideo token if possible, keep it private, and revoke or rotate it if you no longer use the skill.

What this means

Uploaded clips, URLs, and editing prompts may be processed by the external NemoVideo service.

Why it was flagged

The skill sends user-selected video files or URLs to a third-party cloud editing service. This is central to the skill's purpose, but the media may contain private or sensitive content.

Skill content
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Only provide videos you intend to send to that service, and avoid uploading confidential or sensitive footage unless you trust the provider.