Video Generation Automatic
PassAudited by VirusTotal on May 6, 2026.
Overview
Type: OpenClaw Skill Name: video-generation-automatic Version: 1.0.0 The skill bundle provides a functional integration for an AI video generation service (nemovideo.ai). It includes instructions for automated session management, file uploads, and rendering via a cloud API. While it directs the agent to perform environment checks for attribution (e.g., verifying install paths like ~/.cursor/skills/), these actions are transparently documented and directly support the skill's stated purpose without evidence of malicious intent or data exfiltration.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Opening or using the skill can contact the NemoVideo backend and create a remote editing session.
The skill makes network/API calls automatically during setup. This is expected for a cloud video-generation skill, but it is still behavior the user should be aware of.
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Use the skill only if you are comfortable with automatic setup calls to the listed backend; ask the agent to confirm before uploads or exports if you want tighter control.
The token can authorize video-generation sessions and credit usage with the provider.
The skill uses a bearer token for the video service and can obtain an anonymous token if one is not already configured. That is purpose-aligned but grants access to the remote service session and credits.
Every API call needs `Authorization: Bearer <NEMO_TOKEN>` ... If it is [not set] ... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token` ... The response `data.token` is your NEMO_TOKEN
Keep NEMO_TOKEN private, avoid exposing logs or environment dumps, and rotate/remove the token if you no longer use the skill.
Any media or prompts you provide for generation may leave your device and be processed by the NemoVideo cloud backend.
User-provided text, images, video, or audio are sent to an external cloud provider for rendering. This is central to the skill purpose, but it is a sensitive data boundary.
Send me your text or images and describe the result you want. The automatic video creation runs on remote GPU nodes ... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file
Do not upload confidential, regulated, or private media unless you trust the provider and its handling of uploaded content.