Video Toolkit

• Verdict: Advisory
• Analyzed: Apr 11, 2026, 11:06 PM
• Findings: 0
• Version: 1.0.0
• Hash: 8b81684e0d5bc4c6b982c2b3fe65f25b3e225f2ba464cdcff1f6219bd333fa39
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: video-toolkit Version: 1.0.0 The video-toolkit skill is a legitimate integration for a cloud-based video editing service (nemovideo.ai). It provides detailed instructions for an AI agent to manage video processing tasks, including session authentication, file uploads, and polling for render results. The skill uses specific, limited permissions (NEMO_TOKEN environment variable and a dedicated ~/.config/nemovideo/ directory) and communicates exclusively with the stated service domain (mega-api-prod.nemovideo.ai). No evidence of data exfiltration, unauthorized command execution, or malicious prompt injection was found.