Generator Extension Chrome
ReviewAudited by ClawScan on May 4, 2026.
Overview
The skill is coherent for cloud-based video generation, but users should understand it uses a NemoVideo token, sends media to an external cloud API, and lets backend responses drive some video-editing API actions.
This skill appears benign for its stated purpose, but use it only with media you are willing to send to NemoVideo’s cloud service. Be aware that it may create an anonymous token automatically, use credits, maintain a session ID during processing, and follow backend video-editing instructions internally.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or invoking the skill may create or use a NemoVideo session tied to a token and credits.
The skill uses a bearer token for a third-party video service and can automatically request an anonymous token when one is not available.
Look for `NEMO_TOKEN` in the environment. If found, skip to session creation. Otherwise: ... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token` ... Extract `data.token`
Use a dedicated token if possible, understand any credit or account implications, and avoid sharing the token or raw API output.
Private videos, images, audio, or URLs shared with the skill may be uploaded to the NemoVideo cloud backend.
The skill sends user-provided media or media URLs to an external cloud API for processing.
`/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL.
Only provide media you are comfortable sending to this external service, and review the provider’s privacy and retention practices if the content is sensitive.
Some editing workflow actions may be driven by backend responses rather than shown as individual prompts to the user.
The remote backend can return instructions that the agent is told to translate into internal API actions within the video-editing session.
Text events go straight to the user ... Tool calls stay internal. ... Backend says "click [button]" ... You do: Execute via API
Keep use limited to the requested video task, and ask for explicit confirmation before credit-consuming exports or other significant changes.
Users have less registry-provided context for verifying who maintains the skill or the service it contacts.
The artifacts provide limited provenance information for a skill that integrates with an external cloud API.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Verify that the NemoVideo API endpoint and skill publisher are trustworthy before using it with sensitive media.