capcut-video-editor

SUSPICIOUS: the skill’s stated purpose is CapCut guidance, but it routes requests, uploads, and tokens through NemoVideo’s backend by default, making it more of a third-party cloud editing agent than a local tutorial skill. No direct malware or command execution is evident, but the external data routing and token-in-URL design create medium risk and imperfect purpose/data-flow alignment.