Ai No Generator
PassAudited by ClawScan on May 12, 2026.
Overview
The skill is coherent for cloud AI video generation, but it sends user-selected media to NemoVideo and uses a service token, so users should trust that provider before using it.
This appears suitable if you want a cloud service to generate videos from clips you choose. Before installing, make sure you are comfortable sending those files to NemoVideo and protecting the NEMO_TOKEN used for access.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Videos or images the user uploads will be processed by an external cloud service.
The skill explicitly sends user-selected media to a third-party cloud API for processing, which is expected for its purpose but important for privacy.
All calls go to `https://mega-api-prod.nemovideo.ai` ... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Only upload clips you are comfortable sending to NemoVideo, and review the provider's privacy and retention terms if the media is sensitive.
Anyone with the token may be able to access the associated NemoVideo session or credits while the token is valid.
The skill relies on a bearer token for service access. This is expected for the integration and the artifact says not to display token values.
Every API call needs `Authorization: Bearer <NEMO_TOKEN>` ... `data.token` is your NEMO_TOKEN — 100 free credits, valid 7 days.
Keep NEMO_TOKEN private, avoid pasting it into chats, and rotate or replace it if it is exposed.
Opening the skill may contact the backend and create an anonymous service token/session.
The skill initiates network setup automatically when opened, before an explicit upload or render request. This is purpose-aligned setup but should be visible to the user.
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Use the skill only if you are comfortable with automatic connection to the named backend; ask the agent what it connected to if unsure.
Backend responses can cause further scoped editing or export API actions during a video-generation session.
The skill asks the agent to translate backend GUI-like responses into API actions. This delegates part of the workflow to remote responses, but within the disclosed video-editing session.
"click" or "点击" → execute the action via the relevant endpoint ... Text response | Apply GUI translation (§4), present to user
Review summaries and exported results before posting, and ask for current state or confirmation before important changes if the edit matters.
Users have less independent information for assessing who operates the service and how it handles uploaded media.
There is no executable package to vet, but there is also limited provenance information for the publisher or external service.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Prefer using this skill with non-sensitive media unless you can verify the provider and its terms through another trusted source.