Video Toolkit

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 11, 2026, 10:42 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requests and runtime instructions are consistent with a remote AI video-editing service; it asks only for a single service token and instructs uploading videos to the stated API endpoints.

This skill appears to do what it claims: it uploads videos to a remote editing API and returns rendered files. Before installing, consider: (1) Privacy — your video files are sent to https://mega-api-prod.nemovideo.ai; avoid uploading sensitive content unless you trust the service and its privacy terms. (2) Credential scope — it requests a single NEMO_TOKEN; if you set a long-lived token, treat it like a password. The skill can also obtain a short anonymous token for you. (3) Minor unexplained metadata — the skill metadata lists ~/.config/nemovideo/ though SKILL.md doesn't say the agent will access that path; ask the publisher why if you are concerned. (4) Verify the service domain and organization (no homepage provided here) if you need stronger trust assurances. If you are comfortable with those privacy/legitimacy points, the skill’s behavior is coherent with its stated purpose.