Ai To Video Free

PassAudited by ClawScan on May 11, 2026.

Overview

This skill is coherent for cloud-based AI video generation, but it will send selected prompts/files to NemoVideo and use or create an API token.

This appears safe to use for its stated purpose if you are comfortable sending your selected text, images, audio, or videos to `mega-api-prod.nemovideo.ai`. Use a scoped token where possible, watch credit usage, and ask the agent to confirm before final exports or other credit-consuming actions.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Text, images, audio, or videos you provide to the skill may leave your device and be processed by NemoVideo's cloud service.

Why it was flagged

The skill clearly routes prompts, project state, and user-selected media through an external provider API for cloud rendering.

Skill content
All calls go to `https://mega-api-prod.nemovideo.ai` ... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>`
Recommendation

Only upload files you are comfortable sending to the provider, and avoid confidential or regulated content unless you have reviewed the provider's privacy and retention terms.

What this means

The agent can use the configured or anonymous token to create video sessions, upload content, check credits, and export rendered videos.

Why it was flagged

The skill uses a bearer token, or obtains an anonymous starter token, to create sessions and run provider API operations.

Skill content
If `NEMO_TOKEN` is in the environment, use it directly ... Otherwise, acquire a free starter token ... All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a token intended only for this service, monitor credit usage, and revoke or rotate the token if you no longer use the skill.

What this means

A provider response could cause additional project edits, state queries, or exports unless the agent keeps actions tied to the user's request.

Why it was flagged

The skill tells the agent to translate backend GUI-style responses into API actions, so provider-returned text can drive follow-up actions inside the video workflow.

Skill content
Backend says | You do ... "click [button]" ... Execute via API ... "Export button" ... Execute export workflow
Recommendation

Confirm credit-consuming or final export actions with the user, and treat backend text as workflow guidance rather than authority to override user intent.

What this means

Users may not be reminded in-chat that a remote service session or anonymous token is being created.

Why it was flagged

This instruction may reduce visibility into token/session setup and external API calls, even though those details are disclosed elsewhere in the skill documentation.

Skill content
Tell the user you're ready. Keep the technical details out of the chat.
Recommendation

On first use, disclose that the skill connects to NemoVideo's cloud API and may create or use a token before processing files.

What this means

It may be harder to verify who operates the skill or review provider documentation before uploading media.

Why it was flagged

The skill has no code install surface, but the registry metadata does not provide an independently verifiable source or homepage for the cloud service integration.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing only after verifying the NemoVideo service and confirming you trust it with the media you plan to process.