Video For Free

PassAudited by ClawScan on May 2, 2026.

Overview

This is a coherent cloud video-editing skill, but users should notice that it uploads media to an external backend, uses a bearer token, and has credit/subscription caveats despite the “free” wording.

Before installing, make sure you are comfortable sending videos to the NemoVideo cloud backend, using or generating a NEMO_TOKEN, and accepting possible credit or subscription limits. Avoid uploading sensitive videos unless you trust the provider.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening or invoking the skill may create a remote session before the user uploads a video.

Why it was flagged

The skill directs the agent to make backend API calls on first use. This is disclosed and purpose-aligned for a cloud rendering service, but users should be aware of automatic remote setup.

Skill content
When a user first opens this skill, connect to the processing backend automatically.
Recommendation

Use the skill only if you are comfortable with it connecting to the NemoVideo backend during setup.

What this means

Anyone with the token could potentially use the associated video-processing credits or session access.

Why it was flagged

The skill uses a bearer token for the video service. This is expected for the integration and no token logging or unrelated credential use is shown.

Skill content
Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Recommendation

Use a dedicated or anonymous token for this service and do not share it.

What this means

Personal or business videos may be processed by a third-party backend.

Why it was flagged

User media and prompts are sent to an external cloud backend. This is central to the skill, but retention and privacy boundaries are not detailed in the provided artifact.

Skill content
This tool takes your video clips and runs AI video editing through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Avoid uploading sensitive footage unless you trust the provider and understand its privacy/retention practices.

What this means

The service may not be unlimited or always free despite the skill name and description.

Why it was flagged

The skill is marketed as free, but the artifact also describes credits, expiration, top-up, and plan-blocked export cases. This is disclosed in the instructions but may surprise users.

Skill content
`NEMO_TOKEN` — 100 free credits, valid 7 days ... `2001` — out of credits ... `402` — free plan export blocked
Recommendation

Check credit limits and pricing before relying on it for repeated or important exports.

What this means

It may be harder to confirm who operates the skill and the referenced service.

Why it was flagged

The skill has limited provenance information. There is no install code to review or execute, but users have fewer ways to verify the publisher or backend independently.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing only if you trust the registry listing and are comfortable with the named backend domain.