Video Generator Free Like Grok
PassAudited by VirusTotal on May 5, 2026.
Overview
Type: OpenClaw Skill Name: video-generator-free-like-grok Version: 1.0.0 The skill is a functional integration for a video generation service hosted at nemovideo.ai. It provides detailed instructions for the AI agent to manage authentication via anonymous tokens, handle user sessions, and interact with specific API endpoints for uploading media and rendering videos. The behavior described is consistent with the stated purpose of a video generation tool, and there are no indicators of data exfiltration, malicious execution, or harmful prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The remote video session may be edited or exported as part of the workflow, which can change the draft or consume service credits.
The skill instructs the agent to convert backend GUI-style text into API actions, including export actions, instead of only displaying those responses to the user.
| "click [button]" / "点击" | Execute via API | ... | "Export button" / "导出" | Execute export workflow |
If credits or final output matter, ask the agent to confirm before export or other irreversible service-side actions.
Anyone with the token could potentially use the associated NemoVideo credits/session while the token is valid.
The skill uses a bearer token to authenticate all calls to the NemoVideo backend. This is expected for the service integration, but it is still account/session authority.
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Use a dedicated or anonymous token, do not paste sensitive tokens into chats, and monitor credit use if you connect an existing account token.
Prompts and uploaded files may be processed and stored by the remote NemoVideo service.
The skill sends prompts, uploaded media, and render/session data to an external provider. This is central to the video-generation purpose, but the artifact does not describe retention or privacy guarantees.
All calls go to `https://mega-api-prod.nemovideo.ai` ... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Avoid uploading confidential, regulated, or private media unless you trust the provider and understand its data handling terms.