Video Generator Free Trial

• Risk level: Low
• Analyzed: Apr 16, 2026, 8:02 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's declared purpose (cloud video generation) aligns with its runtime instructions and its single required credential (NEMO_TOKEN); it mainly sends user text/images to a third‑party API and does not ask for unrelated secrets or install software locally.

This skill will upload whatever text and images you give it to mega-api-prod.nemovideo.ai and will use (or obtain) a service token (NEMO_TOKEN) to do so. That behaviour matches a cloud video service, but you should: 1) confirm you are comfortable with those files leaving your device and with the service's privacy/retention policy; 2) verify the nemovideo.ai domain is legitimate before sharing sensitive images or proprietary content; 3) note the SKILL.md mentions reading the skill frontmatter and detecting install paths (filesystem access) — if you want to avoid any local reads, ask how the agent obtains attribution headers; and 4) if you do not already have a NEMO_TOKEN, the skill will request an anonymous token from the remote API (giving 100 free credits, per the doc). The only clear inconsistency is the frontmatter's config path declaration versus the registry's 'none' — ask the publisher to clarify whether the skill will read ~/.config/nemovideo/.