Korean Video Editing With

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may contact the provider and run cloud editing/export steps once invoked, rather than waiting for manual setup at each step.

Why it was flagged

The agent is instructed to initiate cloud API setup and execute render/export API workflows as part of normal operation.

Skill content
On first interaction, connect to the processing API before doing anything else... Backend says ... "Export button" / "导出" | Execute export workflow
Recommendation

Use it only for intended video-editing tasks and ask for confirmation before uploading or exporting sensitive projects.

What this means

A NEMO_TOKEN can authorize API usage and potentially consume credits or access the user’s provider session.

Why it was flagged

The skill uses a bearer token for the NemoVideo service; this is expected for the integration but is still account/credit-bearing authority.

Skill content
Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Recommendation

Keep NEMO_TOKEN private, avoid sharing logs that may contain credentials, and revoke or rotate the token if exposed.

What this means

Raw footage, audio, images, URLs, prompts, and generated project state may leave the local environment and be processed by the provider.

Why it was flagged

The workflow sends selected local files or URLs to the external NemoVideo API for processing.

Skill content
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Only upload footage you are comfortable sending to NemoVideo, and avoid confidential or private media unless the provider’s terms are acceptable.

What this means

Users have less information for verifying who maintains the skill or where its cloud service documentation lives.

Why it was flagged

The registry metadata does not provide a source repository or homepage for independent provenance review.

Skill content
Source: unknown; Homepage: none
Recommendation

Confirm the provider and trustworthiness of the NemoVideo API before sending valuable or sensitive media.