Video Editing Ai Free Download

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:39 PM UTC
• Version:
  1.0.0

Overview

This skill is a disclosed cloud video-editing helper that sends selected videos and edit prompts to NemoVideo, with no evidence of hidden installation, broad local access, or malicious behavior.

Install only if you are comfortable sending selected video files, URLs, edit prompts, and related session data to NemoVideo for cloud processing. Do not use it for confidential, regulated, or proprietary footage unless you trust the provider's privacy and retention practices, and keep any NEMO_TOKEN private.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The routing table sends all unmatched prompts to the SSE editing action, which can cause unrelated user input to be forwarded to the remote backend by default. In this skill, that is risky because the backend is an external cloud service and broad routing increases the chance of unintended data disclosure or actions based on ambiguous prompts.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill encourages users to upload raw video footage but does not prominently warn that the content is transmitted to and processed by a third-party cloud API. Because videos may contain sensitive visual, audio, or screen-recorded information, the lack of clear disclosure undermines informed consent and can lead to unintended exposure of private data.

VirusTotal

66/66 vendors flagged this skill as clean.