Video Ki Hd

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: video-ki-hd Version: 1.0.0 The skill provides a functional interface for a video upscaling service via the nemovideo.ai API. It includes detailed instructions for the AI agent to handle authentication (including anonymous token generation), session management, file uploads, and render polling. The logic is consistent with the stated purpose of HD video conversion, and there is no evidence of data exfiltration, malicious command execution, or harmful prompt injection in SKILL.md or _meta.json.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can use a NemoVideo token/session to spend or check service credits and run video jobs for the user.

Why it was flagged

The skill uses a bearer token or creates an anonymous provider token to access the cloud service. This is expected for the integration, but it is still delegated service authority.

Skill content
Look for `NEMO_TOKEN` in the environment. If found, skip to session creation. Otherwise: ... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token` ... Extract `data.token` from the response
Recommendation

Use a dedicated or low-privilege token where possible, avoid sharing the token, and revoke or rotate it if you no longer use the skill.

What this means

Videos you provide may be transmitted to and processed by the NemoVideo cloud service.

Why it was flagged

User-provided videos or URLs are sent to an external cloud API for processing. This is central to the skill's purpose, but it affects privacy of uploaded media.

Skill content
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Only upload videos you are comfortable sending to this provider, especially if they contain private, sensitive, or copyrighted material.

What this means

Users have limited artifact-provided information to verify the publisher or service relationship behind the NemoVideo API integration.

Why it was flagged

The skill has no published source or homepage in the provided metadata. There is no installable code to review, but the provenance of the external integration is not independently documented in the artifacts.

Skill content
Source: unknown; Homepage: none
Recommendation

Confirm you trust the publisher and the NemoVideo endpoint before uploading important or private videos.