Image To Video Generate Ai Free

PassAudited by ClawScan on May 3, 2026.

Overview

This skill appears purpose-aligned for cloud image-to-video generation, but it uses a NemoVideo token and sends user media to a third-party API, with possible export or upgrade limits despite the “Free” branding.

This skill is not showing clear malicious behavior in the provided artifacts. Before installing, make sure you are comfortable sending images, videos, audio, and prompts to nemovideo.ai, protect your NEMO_TOKEN, and verify any free-credit or export limits before relying on the service.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may create an external processing session before any file is uploaded.

Why it was flagged

The agent is told to make remote API calls automatically when the skill is first used. This is expected for a cloud-rendering skill, but users should know it initiates an external service session.

Skill content
On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".
Recommendation

Use the skill only when you are ready to connect to the NemoVideo service; consider asking the agent to confirm before uploads or exports.

What this means

Anyone with the token may be able to use the associated NemoVideo access or credits.

Why it was flagged

The skill relies on a bearer token for NemoVideo API access. This is purpose-aligned, but the token can represent access to the user's service account, session, or credits.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a service-specific token, do not share it, and rotate or revoke it if it may have been exposed.

What this means

Private images, video, audio, and prompts may leave the local environment and be processed by the remote NemoVideo service.

Why it was flagged

The skill sends user-provided media to an external provider for server-side rendering. This is central to the purpose, but privacy, retention, and provider-side handling are not described in the artifact.

Skill content
`/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL.
Recommendation

Avoid uploading sensitive personal, confidential, or regulated media unless you trust the provider and understand its data handling terms.

What this means

A user may start a render workflow expecting free export and later encounter registration or upgrade requirements.

Why it was flagged

The skill is branded as free, but the artifact also describes a possible export block requiring registration or upgrade. This tradeoff is disclosed, but users should notice it before uploading media.

Skill content
displayName: "Image to Video Generate AI Free" ... `402` | Free plan export blocked | ... "Register or upgrade your plan to unlock export."
Recommendation

Check credit, registration, and export limits before sending important media or relying on the output.

What this means

It may be harder to verify who maintains the skill or where to review provider documentation.

Why it was flagged

The skill has limited provenance information. There is no code install step, which reduces local execution risk, but users have less information for verifying the external service integration.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer skills with clear source and homepage information when sending private media to external services.