Generator Hindi

AdvisoryAudited by Static analysis on May 3, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening or using the skill can start a connection to the external processing backend before a render request is completed.

Why it was flagged

The skill initiates a backend connection/session automatically. This is disclosed and central to the cloud-rendering workflow, but it is still a network action users should notice.

Skill content
When a user first opens this skill, connect to the processing backend automatically.
Recommendation

Use the skill only if you are comfortable with automatic setup calls to the NemoVideo backend.

What this means

The skill can act against the NemoVideo service using the configured or automatically obtained token, including checking credits, uploading media, and starting exports.

Why it was flagged

The skill requires a bearer token and uses it for all NemoVideo API calls. Credential use is expected for the integrated service, and the artifact does not show token logging or unrelated use.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Treat NEMO_TOKEN as a secret, avoid sharing it, and review any credit or account implications before rendering.

What this means

It may be harder to independently verify who maintains the skill or whether the external API endpoint is the intended service.

Why it was flagged

The skill has limited provenance metadata. There is no executable install payload, but users have less public context for the publisher or service relationship.

Skill content
Source: unknown; Homepage: none
Recommendation

Install only if you trust the publisher and are comfortable using the listed nemovideo.ai API service.

What this means

Uploaded videos, audio, URLs, prompts, draft state, and generated outputs may be processed or stored by the external NemoVideo service.

Why it was flagged

The skill sends user media and workflow data to a third-party provider for processing. This is disclosed and necessary for the stated cloud video generation purpose.

Skill content
All calls go to `https://mega-api-prod.nemovideo.ai`... `Upload` — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Recommendation

Do not upload confidential, regulated, or rights-restricted media unless you are permitted to send it to that third-party service.