Image To Generator
AdvisoryAudited by Static analysis on May 13, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent will authenticate to a third-party service on your behalf, using either your existing token or an automatically acquired anonymous token.
The skill automatically obtains or uses a bearer token for the NemoVideo service and attaches it to API requests.
Look for `NEMO_TOKEN` in the environment... Extract `data.token` from the response — this is your NEMO_TOKEN... Include `Authorization: Bearer <NEMO_TOKEN>`
Only use this skill if you are comfortable with NemoVideo authentication being handled by the agent; avoid sharing the token and monitor credit usage.
Images, audio, URLs, prompts, and generated project state may be sent to NemoVideo's cloud service to produce the video.
The skill sends user media and task data to a disclosed external provider API for cloud processing.
All calls go to `https://mega-api-prod.nemovideo.ai`... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Upload only media you are allowed to share with this provider, and avoid sending confidential images unless the provider's privacy terms meet your needs.
The agent may carry out a sequence of cloud-side actions inside the video project based on the user's request and service responses.
The skill tells the agent to convert backend GUI-style instructions into API operations such as edits, state queries, and exports.
"click" or "点击" → execute the action via the relevant endpoint... "Export" or "导出" → run the export workflow
Review the requested edit/export intent before proceeding, especially if exports consume credits or publish/download final media.
Users have less provenance information for deciding whether the external API integration is from a trusted publisher.
The registry metadata does not provide a source repository or homepage for independently verifying the skill or service relationship.
Source: unknown; Homepage: none
Prefer installing only if you trust the listed publisher and the NemoVideo API endpoint; verify the provider separately if handling sensitive media.