Ai Video Generator Free Hulk

AdvisoryAudited by Static analysis on May 5, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may authenticate to NemoVideo using an existing or newly created token.

Why it was flagged

The skill uses or obtains a provider token for API access. This is expected for the video backend and no leakage or unrelated credential use is shown.

Skill content
Check if `NEMO_TOKEN` is set in the environment... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... The response `data.token` is your NEMO_TOKEN
Recommendation

Use a dedicated token for this service, avoid sharing it, and rotate or revoke it if you no longer use the skill.

What this means

Text prompts and any files you choose to upload may leave your local environment for cloud processing.

Why it was flagged

User prompts and uploaded media can be sent to the external NemoVideo backend. This is central to the stated cloud-rendering purpose and is disclosed.

Skill content
Send message (SSE): POST `/run_sse` — body ... `new_message` ... `text":"<msg>"` ... Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart
Recommendation

Do not submit private, sensitive, or confidential media or prompts unless you trust the provider’s handling of that data.

What this means

A session identifier may link multiple generation, upload, status, and export requests to the same backend session.

Why it was flagged

The skill keeps session state for follow-up render/export calls. This appears necessary for the workflow, but users should know sessions may persist across requests.

Skill content
Store the returned `session_id` for all subsequent requests.
Recommendation

Clear the skill’s local configuration or token/session data if you want to stop reusing the same backend session.

What this means

You may encounter credit limits, expiration, registration, or upgrade prompts despite the free framing.

Why it was flagged

The skill is marketed as free, while the instructions disclose limits, credits, expiration, and possible upgrade requirements. This is a pricing/trust notice rather than evidence of malicious behavior.

Skill content
Generate a free Hulk-themed action video... 100 free credits, valid 7 days... `402` ... "Register or upgrade your plan to unlock export."
Recommendation

Review the provider’s pricing and account requirements before relying on it for free exports.