Chatgpt Video Generator Free Download
AdvisoryAudited by VirusTotal on Apr 16, 2026.
Overview
Type: OpenClaw Skill Name: chatgpt-video-generator-free-download Version: 1.0.0 The skill is a functional wrapper for an AI video generation service hosted at nemovideo.ai. It provides instructions for the agent to manage authentication via environment variables or by fetching an anonymous token, handle session states, and interact with a cloud-based rendering pipeline. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the logic is strictly aligned with the stated purpose of converting text prompts into video files.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may trust the skill as if it were a ChatGPT/OpenAI free video tool, while their requests actually go to a different third-party provider that may have paid limits.
The branding suggests a ChatGPT/free-download service, but the operational backend is NemoVideo and the documented behavior includes subscription-tier export blocking.
displayName: "ChatGPT Video Generator Free Download — Generate Videos from Text Prompts" ... Base URL: `https://mega-api-prod.nemovideo.ai` ... `402` — free plan export blocked; not a credit issue, subscription tier
Install only if you are comfortable using NemoVideo; the publisher should rename the skill and clearly disclose the actual provider and free-tier limits up front.
Opening the skill may contact the NemoVideo backend before you submit a generation request.
The skill directs the agent to make remote setup calls automatically on first open, even though this is disclosed and aligned with the cloud-rendering purpose.
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Use it only if automatic connection to the provider is acceptable; the skill should ideally ask before the first network setup call.
Anyone with the token could potentially use the associated NemoVideo credits/session until it expires or is revoked.
The skill uses a bearer token for the video provider; this is expected for the integration, but it is still account/session authority.
Check if `NEMO_TOKEN` is set in the environment... The response `data.token` is your NEMO_TOKEN ... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Keep NEMO_TOKEN private, avoid sharing logs that contain it, and use a token dedicated to this service.
Private scripts, images, audio, or videos you provide may be uploaded to NemoVideo’s cloud service.
The skill sends prompts and user-selected media to the remote provider for processing, which is expected for cloud video generation but affects data privacy.
`/run_sse` | POST | Send a user message ... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL ... Accepted file types: mp4, mov, avi, webm, mkv, jpg, png, gif, webp, mp3, wav, m4a, aac.
Do not upload sensitive or confidential media unless you have reviewed and accept the provider’s privacy and retention practices.
