Ai Image To Video Ai

PassAudited by ClawScan on May 2, 2026.

Overview

This is a coherent cloud image-to-video skill, but users should understand that it creates/uses a NemoVideo API token and uploads media to an external service for processing.

This skill appears purpose-aligned for cloud image-to-video generation. Before installing, be sure you are comfortable sending media to mega-api-prod.nemovideo.ai and using a NEMO_TOKEN-backed session for rendering and exports.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent will use a service token to create sessions and submit render jobs; token misuse could affect credits or service activity.

Why it was flagged

The skill uses a bearer token for service access and can create an anonymous token automatically if none is configured.

Skill content
Check if `NEMO_TOKEN` is set in the environment... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... The response `data.token` is your NEMO_TOKEN
Recommendation

Use a dedicated token for this service, avoid sharing it, and revoke or rotate it if you stop using the skill.

What this means

Photos, videos, audio, or URLs you provide may be uploaded to NemoVideo’s cloud service.

Why it was flagged

User media is sent to an external provider for processing, which is central to the skill but creates a data-sharing boundary.

Skill content
All calls go to `https://mega-api-prod.nemovideo.ai`... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Recommendation

Do not submit confidential or sensitive media unless you are comfortable with that external processing.

What this means

The agent may automatically start a service session and carry out upload/export operations as part of normal use.

Why it was flagged

The skill instructs the agent to perform service API actions, including session setup and export workflows, based on user intent and backend flow.

Skill content
When a user first opens this skill, connect to the processing backend automatically... `Export` or `导出` → run the export workflow
Recommendation

Confirm which files are being uploaded and whether an export should consume credits before proceeding.

What this means

It may be harder to verify who operates the integration or review external service policies before use.

Why it was flagged

The registry metadata does not provide a source or homepage for independently verifying the service or publisher.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the provider domain and only use the skill if you trust the publisher and external service.