Cartoon Video

ReviewAudited by ClawScan on May 11, 2026.

Overview

This appears to be a coherent cloud cartoon-video skill, but it uses a NemoVideo token and sends selected media/prompts to NemoVideo’s API for processing.

This skill looks purpose-aligned for cloud cartoon-video conversion. Before using it, make sure you are comfortable sending the chosen video/images and prompts to `mega-api-prod.nemovideo.ai`, keep the `NEMO_TOKEN` secret, and confirm exports or other credit-consuming actions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have limited provenance information beyond the registry entry and the API domain named in the skill.

Why it was flagged

The skill is instruction-only and does not install local code, but the registry does not provide an upstream source or homepage to independently verify the provider or author.

Skill content
Source: unknown; Homepage: none
Recommendation

Use it only if you trust the registry publisher and NemoVideo endpoint; review the provider’s privacy and terms before uploading sensitive media.

What this means

The agent can act within the NemoVideo session and use credits tied to that token.

Why it was flagged

The skill uses or automatically obtains a provider bearer token and client identifier for NemoVideo API access.

Skill content
Look for `NEMO_TOKEN`... Otherwise: Generate a UUID as client identifier... Extract `data.token`... Include `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Keep `NEMO_TOKEN` private, use a limited or throwaway token if possible, and confirm credit-consuming actions such as export.

What this means

Private faces, voices, images, audio, and prompt text may be processed by the external provider.

Why it was flagged

User-selected videos/images and prompts are sent to an external cloud processing API, which is expected for this skill but can involve personal media.

Skill content
Drop your video or images in the chat... cloud GPUs... All calls go to `https://mega-api-prod.nemovideo.ai`... Upload — `POST /api/upload-video/...`
Recommendation

Upload only media you are comfortable sending to NemoVideo, and check provider retention/privacy policies for sensitive content.

What this means

Actions may proceed inside the NemoVideo session based on backend responses, though the documented scope is the video editing/export workflow.

Why it was flagged

The skill tells the agent to translate provider SSE/GUI-style responses into further API operations, such as state queries, edits, and exports.

Skill content
The backend responds as if there's a visual interface. Map its instructions to API calls: "click"... execute the action via the relevant endpoint
Recommendation

Ask the agent to confirm before exports, paid/credit-consuming operations, or any edit that materially changes the project.