Karaoke Video Maker
PassAudited by ClawScan on May 11, 2026.
Overview
This skill is a coherent cloud karaoke-video wrapper that uses a NemoVideo token and uploads user-selected media for rendering, with no artifact-backed evidence of malicious behavior.
Before installing, understand that this is not local-only: it creates a provider session, uses a NemoVideo token, and uploads selected media to a cloud API for rendering. Avoid sending sensitive or unreleased audio/video unless you trust that provider and its terms.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Opening or using the skill may create a NemoVideo session and later perform upload/export actions against the provider service.
The skill directs the agent to create a backend session and make provider API calls automatically. This is expected for cloud rendering, but it means actions occur through an external service rather than only locally.
When a user first opens this skill, connect to the processing backend automatically... All calls go to `https://mega-api-prod.nemovideo.ai`.
Use it when you intend to use the NemoVideo cloud workflow, and confirm uploads/exports before sending private or valuable media.
Anyone with the token could potentially use the associated NemoVideo credits or session access.
The skill uses a provider token for authenticated API access. This is purpose-aligned and disclosed, with no evidence of hardcoded or unrelated credentials.
Authentication: Check if `NEMO_TOKEN` is set... Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Keep NEMO_TOKEN private, rotate it if exposed, and use a token dedicated to this service where possible.
Uploaded songs, audio, video, or images leave the local environment and are processed by the NemoVideo backend.
The skill sends user-provided media to a third-party cloud API for processing. This is central to the advertised function, but it is still a sensitive data flow users should understand.
Drop your audio files in the chat... I'll handle the lyrics sync video creation on cloud GPUs... Upload — `POST /api/upload-video/nemo_agent/me/<sid>`
Only upload media you are comfortable sending to that provider, especially if it contains private voices, unreleased music, or copyrighted material.
It may be harder to independently verify who maintains the skill or review its full public documentation.
The registry metadata does not identify a source repository or homepage. There is no code to install, but users have limited provenance information for the service instructions.
Source: unknown; Homepage: none
Prefer using it with non-sensitive test files first and verify the NemoVideo service independently if provenance matters to you.