Ai Image To Video Bot

• Risk level: Low
• Analyzed: Apr 15, 2026, 7:06 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requests and instructions are consistent with an image→video cloud-renderer; it asks for one service token and calls a remote API, but nothing clearly unrelated or excessive is requested.

This skill is coherent for a cloud image→video service but it will upload your images and call an external API (mega-api-prod.nemovideo.ai). Consider whether the images or audio you send are sensitive: check the service's privacy/retention policy before using it. If you have your own NEMO_TOKEN from the provider, prefer supplying that rather than relying on the anonymous token flow. Note the metadata lists a config path (~/.config/nemovideo/) — the skill may look for saved credentials there; if you don't want it to, remove or protect that folder. Finally, be aware the skill sets attribution headers that include detected install path and the skill version — if that is a concern, review or sanitize those values before use.