Ai Animation Generator From Image

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may perform provider-side actions such as edits, uploads, state checks, or exports as part of the workflow, potentially using credits.

Why it was flagged

The skill directs the agent to turn backend UI-style messages into API actions, including export. This is coherent for a cloud video editor, but users should know provider responses can drive follow-up API operations.

Skill content
Backend says | You do ... "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Recommendation

Use the skill when you intend to use the NemoVideo cloud workflow, and ask the agent to confirm before exporting if credit usage or final output matters.

What this means

Anyone with the token could access the associated NemoVideo session or credits, so the token should be treated as sensitive.

Why it was flagged

The skill uses a bearer token for all provider API calls. This is expected for the service integration, and the artifact explicitly avoids printing tokens.

Skill content
Every API call needs `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Recommendation

Use a token intended only for this provider, avoid sharing logs that may contain credentials, and rotate the token if it is exposed.

What this means

Images, videos, audio, prompts, and generated project state may be processed by the external NemoVideo service.

Why it was flagged

The skill clearly sends user-provided media and workflow requests to an external provider API for cloud processing.

Skill content
Drop your still images in the chat ... I'll handle the AI animation generation on cloud GPUs ... All calls go to `https://mega-api-prod.nemovideo.ai`.
Recommendation

Do not upload private, confidential, or regulated images unless you are comfortable with that provider processing them.