Free Music Generator Ai

PassAudited by ClawScan on May 16, 2026.

Overview

This is a disclosed cloud video/music-generation integration that uses a NemoVideo token and uploads user-selected media; no malicious or purpose-mismatched behavior is evident.

Use this skill if you are comfortable sending selected video/audio media to NemoVideo's cloud API and using a NemoVideo token for processing. Avoid uploading confidential clips unless you trust the provider and understand its data handling terms.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may perform editing or export API steps based on backend workflow messages after you ask it to generate or modify a video.

Why it was flagged

Provider responses can be translated into API actions. This is expected for the described cloud editor workflow, but users should be aware that the remote backend guides some internal actions.

Skill content
The backend responds as if there's a visual interface. Map its instructions to API calls: - "click" or "点击" → execute the action via the relevant endpoint ... - "Export" or "导出" → run the export workflow
Recommendation

Use it for intended video-generation tasks and review outputs before relying on or sharing the generated file.

What this means

The provider token authorizes video-processing API requests and should be treated like an account/session secret.

Why it was flagged

The skill uses a bearer token for the NemoVideo service. This is disclosed and purpose-aligned, with no evidence of hardcoded credentials or unrelated credential use.

Skill content
Authentication: Check if `NEMO_TOKEN` is set in the environment... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... The response `data.token` is your NEMO_TOKEN
Recommendation

Only provide or use a NEMO_TOKEN you intend to use with this service, and avoid sharing token values in chat or logs.

What this means

Video clips or media URLs you provide may leave your device/workspace and be processed by NemoVideo's cloud service.

Why it was flagged

The skill sends user-selected files or URLs to an external provider API for processing. This is central to the stated cloud rendering purpose and the destination is disclosed.

Skill content
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Upload only media you are comfortable sending to the external service, especially if it contains private people, locations, audio, or business content.