Free Voiceover
PassAudited by ClawScan on May 11, 2026.
Overview
This appears to be a coherent cloud voiceover/video-rendering integration, but using it sends selected media or scripts to NemoVideo and relies on a service token.
Before installing, make sure you are comfortable sending selected media or scripts to mega-api-prod.nemovideo.ai and storing/using a NEMO_TOKEN. The provided artifacts show no local code execution or hidden install behavior, but sensitive or confidential content should only be uploaded if the provider's privacy and retention practices are acceptable to you.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Videos, scripts, and prompts you provide may be processed by the external NemoVideo service.
The skill is explicit that user-provided videos or scripts are sent to a cloud rendering backend, which is purpose-aligned but means private content leaves the local environment.
This tool takes your video or script and runs AI voiceover generation through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Only upload files or scripts you are comfortable sending to that provider, especially if they contain private, confidential, or regulated content.
Anyone with access to the token may be able to use the associated NemoVideo API session or credits according to the provider's rules.
The skill uses a bearer token for all provider API requests; this is expected for the service but is still credential-based delegated access.
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Store NEMO_TOKEN securely, avoid sharing logs containing it, and revoke or rotate it if it is exposed.
You may see a simple status message rather than full details about the backend session creation.
The skill tells the agent not to show connection details during token/session setup. This appears to be a simplification of user experience, not deception, but it reduces transparency.
Tell the user you're ready. Keep the technical details out of the chat.
If you need transparency, ask the agent what service it is contacting and what data it will send before uploading content.
It may be harder to verify who maintains the skill or review the service relationship outside the provided SKILL.md.
The registry information does not provide a source repository or homepage, which limits independent provenance review. The risk is reduced because no code or install script is present.
Source: unknown; Homepage: none
Prefer installing from publishers and services you trust, and verify the provider domain before sending sensitive media.