Video Generator Free Trial

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only video generation skill whose cloud upload behavior is disclosed and fits its purpose, with privacy caution for user-provided media.

Install only if you are comfortable sending the text, images, audio, or video you provide to NemoVideo’s cloud service for processing. Avoid sensitive or confidential media unless you trust that provider’s privacy and retention practices.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill encourages users to upload text, images, and media while only later disclosing that processing occurs on a third-party cloud backend. That lack of upfront transparency can cause users to unknowingly transmit sensitive or proprietary content off-platform, creating privacy, compliance, and data-governance risk.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal