Easy Pika Ai
PassAudited by ClawScan on May 10, 2026.
Overview
This is a coherent cloud video-generation skill, but it uses a NemoVideo/NEMO token service and uploads user-provided media to that external API.
This skill appears aligned with cloud AI video generation and shows no local code execution or destructive behavior in the provided artifacts. Before installing, confirm you are comfortable using the NemoVideo API behind the Pika-branded skill, use a dedicated token if possible, and avoid uploading sensitive media.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
When you invoke the skill, it can create a provider session and operate the video-generation workflow on your behalf.
The skill authorizes automatic setup and API actions driven by the video backend. This is purpose-aligned for a cloud editor, but users should notice that the agent may perform session, edit, and export API workflows rather than only giving instructions.
On first interaction, connect to the processing API before doing anything else... Backend says "click [button]" ... You do "Execute via API"
Use it only when you intend to use the external video service, and review generated/exported results before sharing them elsewhere.
The provider token may allow API use and credit consumption within the external video service.
The skill uses a provider credential or generates an anonymous token for the NemoVideo API. This is expected for the service and it explicitly says not to print tokens, but it is still account-like access.
If `NEMO_TOKEN` environment variable is already set, use it... Include `Authorization: Bearer <NEMO_TOKEN>`
Prefer a dedicated or anonymous token, avoid sharing the token, and check credit usage if you use a paid or personal NEMO_TOKEN.
Photos, clips, prompts, and generated project state may be processed by the external NemoVideo service.
The skill sends user-provided media and prompts to an external cloud API for processing. This is central to its purpose and disclosed, but it creates a data-sharing boundary users should understand.
Drop your images or video clips... I'll handle the AI video generation on cloud GPUs... Upload: POST `/api/upload-video/nemo_agent/me/<sid>`
Do not upload sensitive, private, or rights-restricted media unless you are comfortable with that provider processing it.
You may assume you are interacting directly with Pika AI when the documented provider endpoint is NemoVideo.
The user-facing branding references Pika AI, while the documented API and token are for NemoVideo. The endpoint is disclosed, so this is not evidence of deception by itself, but users should verify which service they are actually using.
displayName: "Easy Pika AI — Generate Videos from Images"... API base: `https://mega-api-prod.nemovideo.ai`
Verify the provider relationship and privacy terms before uploading important media.