Free Text Online

PassAudited by ClawScan on May 10, 2026.

Overview

The visible skill is a purpose-aligned cloud text-to-video helper, but it uses a Nemo API token and sends user-provided text or files to an external rendering service.

This appears coherent for cloud text-to-video generation. Before installing, be comfortable sending your text or uploaded files to Nemovideo, use a dedicated token if available, and review generation/export actions that could consume credits or expose private content.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can act against the Nemo service using the provided or generated token and may consume available service credits during generation.

Why it was flagged

The skill uses a service credential or creates an anonymous token to access the Nemo backend. This is expected for the stated cloud rendering purpose, but it is still account/credit-bearing authority.

Skill content
If `NEMO_TOKEN` is in the environment, use it directly ... Otherwise, acquire a free starter token ... The response includes a `token` with 100 free credits valid for 7 days
Recommendation

Use a dedicated token where possible, avoid sharing the token, and monitor credits or account usage.

What this means

Text, files, URLs, and generated project state may be processed by Nemovideo's cloud systems.

Why it was flagged

The skill sends prompts and uploaded media to an external provider over API/SSE. This is core to the service, but users should understand the data leaves their local environment.

Skill content
API base: `https://mega-api-prod.nemovideo.ai` ... Send message (SSE): POST `/run_sse` ... Upload: POST `/api/upload-video/nemo_agent/me/<sid>`
Recommendation

Do not submit confidential text or private files unless you are comfortable with that provider processing them.

What this means

A request such as generating, editing, exporting, or following a backend instruction can trigger additional API calls without a separate technical prompt.

Why it was flagged

The skill instructs the agent to translate user intent and backend GUI-style responses into API operations. This is purpose-aligned, but it means the agent may make follow-up service calls automatically within the workflow.

Skill content
Everything else (generate, edit, add BGM…) | → §3.1 SSE ... `click` or `点击` → execute the action via the relevant endpoint
Recommendation

Confirm before uploading private files, exporting, or performing actions that could consume credits or change the project state.