Scan Report
0 /100
nemo-edit
AI Video Editor for Color Grading and Background Music — applies LUTs, adjusts exposure/saturation, mixes audio tracks, and adds background music via remote API
This skill consists entirely of documentation (Markdown) describing a remote video editing API. No executable code, scripts, or dependencies are present. The skill makes authenticated API calls to external video processing endpoints but does not execute local code, access sensitive paths, or exfiltrate data.
Safe to install
Approve for use. This is a pure-documentation skill with no executable attack surface.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | READ | ✓ Aligned | Documentation describes uploading files but no local read/write code exists |
| Network | READ | READ | ✓ Aligned | SKILL.md:22-23 declares https://mega-api-prod.nemovideo.ai |
| Shell | NONE | NONE | — | No shell execution documented or present |
| Environment | NONE | NONE | — | Only references NEMOVIDEO_API_KEY as user-supplied; no iteration through os.envi… |
| Database | NONE | NONE | — | No database access documented or present |
7 findings
Medium External URL 外部 URL
https://nemovideo.com SKILL.md:22 Medium External URL 外部 URL
https://mega-api-prod.nemovideo.ai SKILL.md:23 Medium External URL 外部 URL
https://cdn.nemovideo.ai/outputs/job_edit_778/final.mp4 SKILL.md:367 Medium External URL 外部 URL
https://mega-api-dev.nemovideo.ai references/api-reference.md:3 Medium External URL 外部 URL
https://cdn.nemovideo.ai/outputs/job_edit_abc001/final.mp4 references/api-reference.md:443 Medium External URL 外部 URL
https://cdn.nemovideo.ai/outputs/job_edit_abc001/thumb.jpg references/api-reference.md:444 Medium External URL 外部 URL
https://cdn.nemovideo.ai/outputs/job_edit_abc001/preview_720p.mp4 references/api-reference.md:445 File Tree
2 files · 27.7 KB · 978 lines Markdown 2f · 978L
├─
▾
references
│ └─
api-reference.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Pure documentation skill — no executable attack surface
✓ All network activity is declared in SKILL.md with clear API documentation
✓ No credential harvesting beyond the explicitly required NEMOVIDEO_API_KEY
✓ No file writes, shell execution, or sensitive path access
✓ No obfuscation, base64 payloads, or hidden instructions
✓ No supply chain risks since there are no dependencies or package files