Maker Free Google

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a coherent cloud video-making skill, but it sends user-selected media and prompts to a NemoVideo backend and uses a service token despite Google-oriented wording.

This skill is reasonable for cloud video generation if you are comfortable sending selected media and prompts to NemoVideo and using a NEMO_TOKEN. Treat the token as a credential, avoid uploading sensitive files unless you trust the provider, and remember the artifacts do not show this as a Google-operated service.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can authenticate to the NemoVideo service and use the associated free credits/session.

Why it was flagged

The skill uses a bearer token for the backend and can create an anonymous provider token if one is not present. This is expected for the service, but it is still credential handling.

Skill content
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Extract `data.token` from the response
Recommendation

Use a dedicated token where possible, do not share it, and be aware that the skill connects to NemoVideo with bearer authentication.

What this means

Private images, videos, audio, URLs, and editing prompts may be uploaded to and processed by NemoVideo infrastructure.

Why it was flagged

The core workflow sends user-provided images, clips, URLs, and prompts to an external cloud backend. This is purpose-aligned, but it affects user data privacy.

Skill content
This tool takes your images or clips and runs AI video creation through a cloud rendering pipeline... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Recommendation

Only provide files you are comfortable sending to that cloud service; avoid sensitive or confidential media unless you trust the provider’s handling.

What this means

Backend responses may cause the agent to continue editing, querying state, or exporting within the NemoVideo session.

Why it was flagged

The skill directs the agent to convert backend GUI-style instructions into API calls. The actions appear limited to the video session workflow, but users should know the backend can drive subsequent service actions.

Skill content
"click" or "点击" → execute the action via the relevant endpoint... "Export" or "导出" → run the export workflow
Recommendation

Review generated results and exported output before posting or sharing; ask the agent to confirm major changes if needed.

What this means

A user might initially assume the service is a Google product or Google-hosted when the workflow actually uses NemoVideo endpoints.

Why it was flagged

The user-facing name emphasizes Google, while the actual backend shown in the artifact is NemoVideo. The artifact does disclose the backend, but the branding could be confusing.

Skill content
displayName: "Free Video Maker on Google — Create and Export Videos Free"... **API base**: `https://mega-api-prod.nemovideo.ai`
Recommendation

Verify that you are comfortable using NemoVideo’s cloud service; do not assume Google account, Google privacy terms, or Google support apply.