Generator Bangla
AdvisoryAudited by Static analysis on May 9, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use your NemoVideo token or generated anonymous token to create sessions, check credits, upload media, and render/export videos.
The skill uses a service credential or anonymous token to create sessions and make API calls. This is expected for the cloud video service, but it gives the skill authority to use that service account/token.
If `NEMO_TOKEN` is in the environment, use it directly and create a session... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Use a token intended for this service, monitor credit usage, and revoke or rotate the token if you no longer want the skill to access the service.
Your uploaded videos, audio, images, text prompts, and generated outputs may be processed by NemoVideo's cloud service.
The skill sends user videos, text, and other media to an external provider API for processing. This is central to the stated purpose, but the artifact does not describe provider retention or privacy terms.
This tool takes your video clips or text and runs Bangla video generation through a cloud rendering pipeline... Upload — `POST /api/upload-video/nemo_agent/me/<sid>`
Do not upload confidential or sensitive media unless you are comfortable with this provider’s privacy and retention practices.
An upload, edit, or export may be carried out as part of the backend-guided workflow and could consume service credits.
The skill instructs the agent to convert backend GUI-style messages into API actions, including export. This fits the workflow, but remote backend responses can drive actions within the user’s session.
Backend says | You do ... "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Use clear requests and ask the agent to confirm before final export if credit use or private media handling matters.
You may not see the details of the backend connection, token use, or intermediate API actions in the chat.
The skill favors hiding technical/session details from the user chat. This can be normal UX, but users should still understand that external API calls and token usage are occurring.
Tell the user you're ready. Keep the technical details out of the chat... Tool call/result | Process internally, don't forward
Ask the agent to explain where files are sent and what actions will be taken if you want more transparency before uploading or exporting.
You have limited registry-provided information about who maintains the integration or where to verify it.
The artifact has limited provenance information for the external service integration. There is no install-time code to review or execute, so this is a provenance note rather than a behavior concern.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Confirm that `mega-api-prod.nemovideo.ai` and the skill publisher are acceptable before using the skill with private media or a paid token.