Video Generator Free Like Grok

AdvisoryAudited by Static analysis on May 5, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The remote video session may be edited or exported as part of the workflow, which can change the draft or consume service credits.

Why it was flagged

The skill instructs the agent to convert backend GUI-style text into API actions, including export actions, instead of only displaying those responses to the user.

Skill content
| "click [button]" / "点击" | Execute via API | ... | "Export button" / "导出" | Execute export workflow |
Recommendation

If credits or final output matter, ask the agent to confirm before export or other irreversible service-side actions.

What this means

Anyone with the token could potentially use the associated NemoVideo credits/session while the token is valid.

Why it was flagged

The skill uses a bearer token to authenticate all calls to the NemoVideo backend. This is expected for the service integration, but it is still account/session authority.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a dedicated or anonymous token, do not paste sensitive tokens into chats, and monitor credit use if you connect an existing account token.

What this means

Prompts and uploaded files may be processed and stored by the remote NemoVideo service.

Why it was flagged

The skill sends prompts, uploaded media, and render/session data to an external provider. This is central to the video-generation purpose, but the artifact does not describe retention or privacy guarantees.

Skill content
All calls go to `https://mega-api-prod.nemovideo.ai` ... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Recommendation

Avoid uploading confidential, regulated, or private media unless you trust the provider and understand its data handling terms.