Generator Adobe

AdvisoryAudited by Static analysis on May 3, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Starting the skill may create a remote processing session with the provider.

Why it was flagged

The skill directs automatic remote API setup at invocation time. This is disclosed and needed for the service, but users should know it may contact the provider before a specific render request.

Skill content
On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".
Recommendation

Only invoke the skill when you are comfortable starting a NemoVideo cloud session.

What this means

Anyone with the token could potentially use the associated NemoVideo credits/session.

Why it was flagged

The skill uses a bearer token or obtains an anonymous token for NemoVideo API access. This is expected for the integration, and the artifact says not to print tokens.

Skill content
If `NEMO_TOKEN` environment variable is already set, use it... The response field `data.token` becomes your NEMO_TOKEN... Include `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a dedicated token where possible, avoid sharing logs that might contain credentials, and revoke or rotate the token if exposed.

What this means

Private product images, clips, prompts, and generated outputs may be processed by the external NemoVideo service.

Why it was flagged

The skill sends user-provided images, videos, and prompts to an external cloud API for processing. This is central to the stated function and is disclosed.

Skill content
Drop your video clips or images in the chat... I'll handle the AI video generation on cloud GPUs... Upload: POST `/api/upload-video/nemo_agent/me/<sid>`
Recommendation

Avoid uploading confidential or regulated media unless you accept the provider’s handling of that data.

What this means

Users could mistakenly assume the service is operated by or affiliated with Adobe.

Why it was flagged

The name and wording may suggest an Adobe-related experience, while the disclosed backend is NemoVideo. The artifact does disclose the actual API base.

Skill content
displayName: "Generator Adobe — Generate Videos with AI Tools" ... **API base**: `https://mega-api-prod.nemovideo.ai`
Recommendation

Treat this as a NemoVideo-backed cloud tool unless the publisher separately proves Adobe affiliation.