Ai Video Music Lesson Video
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This instruction-only skill appears focused on generating music lesson videos, with only an expected NemoVideo token/config reference to notice before use.
This skill looks benign and purpose-aligned. Before installing, confirm you are comfortable connecting it to NemoVideo via the NEMO_TOKEN or local NemoVideo configuration, and prefer a limited token if the service supports one.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If installed and configured, the skill may use your NemoVideo token to generate video content through that account.
The skill declares a primary provider credential, which is expected for a NemoVideo integration but gives the agent access to act through that configured service account.
Primary credential: NEMO_TOKEN
Use a dedicated or least-privileged NemoVideo token if available, and revoke it if you stop using the skill.
The skill may rely on local NemoVideo configuration, which could connect generated lesson requests to your configured account.
The skill front matter references a local NemoVideo configuration path and token name; this is purpose-aligned but should be visible to users because it may involve local account configuration.
metadata: {"openclaw": {"emoji": "🎵", "requires": {"env": [], "configPaths": ["~/.config/nemovideo/"]}, "primaryEnv": "NEMO_TOKEN"}}Check the NemoVideo configuration directory and token scope before use, especially on shared machines.