Subtitle Assistant

• Risk level: Low
• Analyzed: Apr 23, 2026, 8:59 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions align with its stated purpose (uploading videos and calling a cloud subtitle/render API); nothing requested appears disproportionate.

This skill uploads your video files and interacts with an external service at mega-api-prod.nemovideo.ai. It will use NEMO_TOKEN from the environment or obtain an anonymous token by calling the service (network call). Before installing, confirm you trust that external service and are comfortable uploading the videos and any contained audio/transcript data. If you have sensitive content, avoid using anonymous tokens or revoke tokens after use. Note the YAML metadata lists a config path (~/.config/nemovideo/) even though the instructions don't read it — ensure your platform does not expose other local secrets via that path. If you need stronger assurances, ask the skill author for a privacy policy, data retention details, or an option that runs locally instead of sending files to the cloud.