Video Maker Free Online
PassAudited by VirusTotal on May 2, 2026.
Overview
Type: OpenClaw Skill Name: video-maker-free-online Version: 1.0.0 The skill provides a legitimate interface for a cloud-based AI video creation service. It defines clear workflows for authentication via anonymous tokens, session management, and media processing using the 'mega-api-prod.nemovideo.ai' backend. The instructions are well-aligned with the stated purpose, and there is no evidence of data exfiltration, malicious command execution, or harmful prompt injection; notably, it includes a security-conscious instruction to avoid displaying raw API tokens to the user.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can use the configured or generated NEMO_TOKEN to create sessions, upload media, check credits, and request exports on the video service.
The skill requires a bearer token for the video backend. This is expected for the service, and the instructions also say not to display token values, but it is still credentialed account/session access.
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Use a dedicated token for this service if possible, and avoid sharing the token or installing the skill if you do not trust the backend.
Photos, videos, audio files, prompts, draft state, and export requests may be processed by the external nemovideo.ai service.
The skill discloses that user media and workflow data are sent to a third-party backend for cloud rendering. This is central to the advertised online video-maker purpose, but retention/privacy boundaries are not described in the artifact.
All calls go to `https://mega-api-prod.nemovideo.ai` ... **Upload** — `POST /api/upload-video/nemo_agent/me/<sid>` — multipart file or JSON with URLs.
Do not upload confidential or sensitive media unless you are comfortable with that third-party service processing it.
The agent may create a session, poll state, upload media, or execute export-related API calls as part of the video workflow.
The skill tells the agent to initiate backend setup automatically and to convert backend UI-style instructions into API actions. This appears scoped to the video-rendering workflow, but it means the agent may perform service-side actions without showing every raw backend instruction.
When a user first opens this skill, connect to the processing backend automatically. ... Backend says "click [button]" / "点击" | Execute via API
Review the requested video actions and export choices, especially if exports consume credits or publish/share links.
Users have less independent information about who operates or maintains the skill/backend.
There is no local code to install, which limits local supply-chain risk, but the registry provides limited provenance for the skill and its third-party backend.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Install only if you trust the listed skill publisher and are comfortable using the nemovideo.ai backend.