capcut-ai-video-editor

SUSPICIOUS: the skill is not overt malware, and its data flows appear to stay within same-brand NemoVideo infrastructure, but its stated CapCut coaching purpose is only partially aligned with its actual behavior. It collects/uses Nemo tokens, reads Nemo config paths, uploads user media, and routes all operations through a non-CapCut backend with an unusual anonymous-token flow. The main concern is purpose-capability mismatch and remote cloud handling of user content, not confirmed credential theft or malicious payload delivery.