Ai Video Generator Online Free

PassAudited by ClawScan on May 6, 2026.

Overview

This is a coherent cloud video-generation skill, but it sends user prompts and media to an external NemoVideo API and uses or creates a bearer token for that service.

This skill appears purpose-aligned and has no local code or install script in the provided artifacts. Before installing, be comfortable with sending prompts and media files to mega-api-prod.nemovideo.ai, use a dedicated NemoVideo token if possible, review exports or credit use, and avoid uploading sensitive content unless you trust the provider.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The backend workflow can cause the agent to take service-side actions such as exporting a video, which may affect credits or generated outputs.

Why it was flagged

The skill instructs the agent to translate backend-provided GUI-style instructions into API actions, including export, within the video-generation session.

Skill content
Backend says | You do ... "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Recommendation

Review generated drafts and exports, and monitor credits if using a non-anonymous or paid NemoVideo token.

What this means

Anyone with the token may be able to use the associated service credits/session until it expires or is revoked.

Why it was flagged

The skill requires or creates a bearer token for the external video service and uses it on API requests.

Skill content
Include `Authorization: Bearer <NEMO_TOKEN>` ... Obtain a free token ... response `data.token` is your NEMO_TOKEN
Recommendation

Use a dedicated token for this skill, avoid sharing logs that contain credentials, and revoke or rotate the token if you no longer trust the skill.

What this means

Private images, videos, audio, text prompts, or media URLs supplied to the skill may be processed by the third-party backend.

Why it was flagged

User prompts and uploaded media are sent to an external cloud provider for processing.

Skill content
All calls go to `https://mega-api-prod.nemovideo.ai` ... Chat (SSE) ... your message ... Upload ... multipart file or JSON with URLs
Recommendation

Only upload content you are comfortable sending to that service, and check the provider's privacy and retention terms before using sensitive media.

What this means

It may be harder to verify who operates the skill or whether the NemoVideo endpoint is officially associated with the publisher.

Why it was flagged

The supplied artifacts do not identify a source repository or homepage for verifying the publisher or external service relationship.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the provider and token endpoint independently before sending valuable or sensitive media.