Video Maker Free Online Ai

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:38 PM UTC
• Version:
  1.0.0

Overview

This is a coherent cloud video-making skill, but users should understand that uploaded media and prompts are sent to NemoVideo for processing.

Install only if you are comfortable sending photos, clips, logos, prompts, and generated project state to nemovideo.ai. Use a dedicated NEMO_TOKEN when possible, avoid sensitive or regulated media unless you trust the provider, and confirm credit-consuming export actions before proceeding.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The invocation guidance is broad enough that ordinary phrases like "export," "upload," or generic creation requests may trigger the skill unintentionally. Because the skill automatically connects to a remote backend and can upload/process user media, accidental activation can lead to unintended data transfer and cloud actions without clear user intent.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The skill encourages users to drop images or clips into chat but does not clearly warn that those media files are sent to a third-party cloud backend for processing. This creates a privacy and consent risk, especially for sensitive, proprietary, or personal media that users may assume stays local.

VirusTotal

66/66 vendors flagged this skill as clean.