Kissing Video Maker Free App
AdvisoryAudited by Static analysis on May 4, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone with the token could potentially use the associated NemoVideo credits or session access.
The skill requires a bearer token for the NemoVideo API. This is expected for the stated cloud rendering workflow, and the artifact includes a basic instruction not to expose the token.
Every API call needs `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Use a dedicated token for this service, avoid sharing it in prompts or logs, and rotate it if it may have been exposed.
Private photos, videos, and facial imagery may be processed by the third-party service rather than staying local.
The skill discloses that user media, including likely face photos or video clips, is sent to an external provider for cloud processing.
upload two photos of a couple or a short 30-second clip ... All rendering happens server-side. ... All calls go to `https://mega-api-prod.nemovideo.ai`.
Only upload media you have permission to use, avoid highly sensitive images, and review the provider’s privacy and retention policies before using it.
Using the skill can trigger remote API actions and consume service credits during ordinary video-generation or export requests.
The skill directs the agent to automatically perform API workflows, including session setup and export actions, as part of normal operation.
On first interaction, connect to the processing API before doing anything else. ... `Export` or `导出` → run the export workflow
Confirm the intended edit/export request before proceeding, especially when credits or uploaded personal media are involved.