Online Free Export
PassAudited by VirusTotal on May 4, 2026.
Overview
Type: OpenClaw Skill Name: online-free-export Version: 1.0.0 The skill bundle provides a legitimate integration for a video processing service (nemovideo.ai). It automates API interactions for video uploading, editing via SSE, and rendering. While it accesses specific configuration paths (~/.config/nemovideo/) and environment variables (NEMO_TOKEN), these are strictly related to its stated purpose of managing video export sessions. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found. The primary external endpoint is mega-api-prod.nemovideo.ai.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may start sessions, query state, upload, or export through NemoVideo as part of the workflow without asking for a separate confirmation at each API step.
The skill instructs the agent to initiate API setup automatically and to turn backend UI-like instructions into service API calls. This is purpose-aligned for a cloud renderer, but users should know actions can proceed within the service workflow once invoked.
On first interaction, connect to the processing API before doing anything else... "click" or "点击" → execute the action via the relevant endpoint
Use it only for intended video-export tasks, and confirm before providing files or requesting edits that may affect your cloud session or credits.
Anyone with the token could potentially access or act within the associated NemoVideo session or account scope.
The skill uses a bearer credential for the NemoVideo API. This is expected for the service integration, and the artifact says not to print tokens, but it is still account/session authority.
If `NEMO_TOKEN` environment variable is already set, use it... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Provide or expose `NEMO_TOKEN` only if you trust the NemoVideo integration, and rotate or remove the token if you no longer need the skill.
Your video content and editing/export instructions may leave your local environment and be processed by NemoVideo.
The skill sends video files, URLs, session state, and prompts to an external cloud API. That data flow is disclosed and purpose-aligned, but retention and privacy boundaries are not detailed in the provided artifact.
This tool takes your edited video project and runs free video export through a cloud rendering pipeline... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL
Avoid uploading sensitive, confidential, or rights-restricted media unless you are comfortable with NemoVideo processing it.
The service may not always be free or available without registration, despite the promotional wording.
The skill strongly markets free export, but its own error handling notes that registration or upgrade may be required in some cases. This is a user-expectation issue rather than clear malicious behavior.
export my finished video as MP4 for free without a watermark... without watermarks or subscriptions... 402 | Free plan export blocked | ... "Register or upgrade your plan to unlock export."
Check NemoVideo’s current pricing, account, and export limits before relying on the skill for important work.