Korean Video Editing With
AdvisoryAudited by VirusTotal on Apr 11, 2026.
Overview
Type: OpenClaw Skill Name: korean-video-editing-with Version: 1.0.0 The skill is a functional integration for the NemoVideo AI video editing service, facilitating cloud-based rendering and subtitle generation. It provides detailed instructions for the agent to manage authentication tokens, sessions, and file uploads via the 'mega-api-prod.nemovideo.ai' domain. While it includes logic for the agent to identify its installation environment for attribution headers and instructs the agent to suppress raw tokens in the UI, these behaviors are consistent with the stated purpose of providing a streamlined video editing tool and maintaining good security/UX practices.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may contact the provider and run cloud editing/export steps once invoked, rather than waiting for manual setup at each step.
The agent is instructed to initiate cloud API setup and execute render/export API workflows as part of normal operation.
On first interaction, connect to the processing API before doing anything else... Backend says ... "Export button" / "导出" | Execute export workflow
Use it only for intended video-editing tasks and ask for confirmation before uploading or exporting sensitive projects.
A NEMO_TOKEN can authorize API usage and potentially consume credits or access the user’s provider session.
The skill uses a bearer token for the NemoVideo service; this is expected for the integration but is still account/credit-bearing authority.
Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Keep NEMO_TOKEN private, avoid sharing logs that may contain credentials, and revoke or rotate the token if exposed.
Raw footage, audio, images, URLs, prompts, and generated project state may leave the local environment and be processed by the provider.
The workflow sends selected local files or URLs to the external NemoVideo API for processing.
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`Only upload footage you are comfortable sending to NemoVideo, and avoid confidential or private media unless the provider’s terms are acceptable.
Users have less information for verifying who maintains the skill or where its cloud service documentation lives.
The registry metadata does not provide a source repository or homepage for independent provenance review.
Source: unknown; Homepage: none
Confirm the provider and trustworthiness of the NemoVideo API before sending valuable or sensitive media.