Image To Video Offline
WarnAudited by ClawScan on May 10, 2026.
Overview
The skill markets itself as offline, but its instructions automatically connect to a cloud video API and send media to that service.
Use this only if you are comfortable with cloud processing by mega-api-prod.nemovideo.ai. Despite the name, it is not offline; verify the provider/source and avoid sending sensitive images unless you understand the privacy and retention implications.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may believe their images are processed locally, when the workflow actually sends data to a third-party cloud service.
The skill presents itself as offline/no-internet while instructing the agent to connect to a remote API and use cloud GPU processing.
displayName: "Image to Video Offline" ... "without internet" ... "On first interaction, connect to the processing API" ... "API base: `https://mega-api-prod.nemovideo.ai`"
Rename and describe the skill as cloud-based, clearly disclose the provider and data transfer before upload, and ask for confirmation before sending user media.
The agent may create a provider session automatically as part of using the skill.
The skill directs automatic network/API setup when first used. This is aligned with the cloud-render purpose, but users should notice that it is not local/offline operation.
On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".
Make first-use setup explicit to the user and provide a clear opt-in before creating a session or using external APIs.
The provider can associate requests with the supplied or generated token and session.
The skill uses a bearer token or generates an anonymous token for the provider API. This is expected for the service, and the instructions say not to print tokens.
If `NEMO_TOKEN` environment variable is already set, use it ... Free token: Generate a UUID ... response field `data.token` becomes your NEMO_TOKEN
Use a dedicated token for this service, avoid sharing it, and revoke or rotate it if you no longer use the skill.
Images, prompts, and generated project state may leave the local environment and be processed by the Nemovideo cloud service.
Prompts and uploaded media are sent to a remote provider session/agent. This is purpose-aligned for cloud video rendering, but it is a sensitive data boundary.
Send message (SSE): POST `/run_sse` ... `app_name":"nemo_agent"` ... Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart
Do not use confidential or regulated images unless you are comfortable with the provider handling them and have reviewed its privacy terms.