Image To Jpg Video

• Risk level: Low Risk
• Analyzed: Apr 16, 2026, 5:59 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requests and runtime instructions are consistent with its stated purpose (uploading images and calling a cloud rendering API); it asks only for a single token and has no install steps, but it will send user images to an external nemo video service and auto-create anonymous tokens if none are provided.

This skill sends images and session data to an external service (mega-api-prod.nemovideo.ai) to produce videos. Before installing: 1) Confirm you trust that external service and its privacy/TOS because your images will leave your device; avoid uploading sensitive images. 2) Understand the skill will auto-generate an anonymous token and open a network session if you don't provide NEMO_TOKEN, so it can start processing immediately. 3) If you prefer explicit consent, provide your own NEMO_TOKEN or decline to install. 4) Note the skill may check common install paths to set an attribution header — this is not accessing secrets but does probe the filesystem. If any of these behaviors are unacceptable, do not install or use the skill.