Video To Text Ai Free
AdvisoryAudited by Static analysis on May 2, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Videos, audio, images, or URLs you provide may be uploaded to and processed by nemovideo.ai.
The skill sends user-provided media to an external cloud backend for processing. This is purpose-aligned, but data retention, provider identity beyond the domain, and privacy boundaries are not described in the artifact.
This tool takes your video files and runs AI transcription generation through a cloud rendering pipeline. You upload... API base: `https://mega-api-prod.nemovideo.ai`
Use only with media you are comfortable sending to that third-party service, and check the provider's privacy/retention terms before uploading confidential content.
The service token and session identify your processing session and may control access to credits, jobs, and generated outputs.
The skill obtains or uses a bearer token and session identifier for the remote service. That is expected for this integration, but it is still credential/session handling.
Check if `NEMO_TOKEN` is set... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... The response `data.token` is your NEMO_TOKEN... Store the returned `session_id`
Keep NEMO_TOKEN private, avoid sharing logs that include authorization headers, and refresh or remove the token if you no longer use the skill.
Edits, state changes, or exports may be performed through the service API as part of the conversation flow.
The skill translates backend GUI-style instructions into API actions. This is coherent for the service, but it means remote workflow messages can drive follow-up API calls within the session.
"click" or "点击" → execute the action via the relevant endpoint... "Export" or "导出" → run the export workflow
Review upload and export actions before proceeding, especially for sensitive media or jobs that may consume credits or create shareable output URLs.
You have limited artifact-level information for independently verifying who operates the remote service or how it handles uploads.
The artifact set does not provide a source repository or homepage for provenance. There is no install code to execute, so this is a provenance note rather than a direct execution concern.
Source: unknown; Homepage: none
Verify the provider and terms externally before relying on the skill for private or business-sensitive media.