Ai Image To Video Hd
AdvisoryAudited by Static analysis on May 4, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill can create remote rendering jobs and use available credits.
The skill directs the agent to make remote API calls and start export jobs as part of its normal workflow. This is aligned with the video-generation purpose, but export actions can consume service credits or create remote jobs.
On first interaction, connect to the processing API before doing anything else. ... `/api/render/proxy/lambda` | POST | Start export.
Only ask it to upload or export files you intend to process, and confirm costly or final export actions if credit usage matters.
Anyone with the token could potentially access the related NemoVideo session or credits.
The skill uses a bearer token for the NemoVideo API, or generates an anonymous token if one is not set. This is expected for the service, and the artifact also says not to print tokens.
If `NEMO_TOKEN` environment variable is already set, use it ... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Keep NEMO_TOKEN private, avoid pasting it into chats, and rotate/remove it if you no longer use the service.
Images, videos, audio, and related prompts you provide may leave your machine and be processed by NemoVideo’s cloud service.
The skill sends user-provided media and prompts to an external cloud API for processing. This is central to the skill’s purpose, but it is a sensitive data boundary.
The AI video generation runs on remote GPU nodes ... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file
Do not upload confidential, regulated, or private media unless you are comfortable with that provider handling it.
You have less provenance information to verify who operates the service or how uploaded media is handled.
The skill has no provided source repository or homepage, which limits independent verification of the remote service and its privacy/security posture.
Source: unknown; Homepage: none
Review the provider separately before using it with sensitive content.