Image To Video Canva

• Risk level: Low
• Analyzed: Apr 20, 2026, 3:49 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions are coherent with an image→video cloud rendering service, but there are minor metadata inconsistencies and privacy implications you should review before use.

This skill appears to do what it says: it uploads your images to a third‑party rendering service and returns a video. Before installing or using it, consider: (1) Source/trust — the package source and homepage are unknown; verify the service domain (mega-api-prod.nemovideo.ai) and its privacy/security posture. (2) Privacy — your images will be uploaded to that external service (including any metadata); do not send sensitive or private images unless you trust the service. (3) Credentials — you can provide your own NEMO_TOKEN or the skill will obtain an anonymous token for you; anonymous tokens may still allow uploads tied to a generated client ID. (4) Local config access — frontmatter references ~/.config/nemovideo/ and auto-detection of an install path for a header value; confirm whether the agent will read local files you care about. If anything is unclear, request the publisher/source, documentation, or a privacy policy before proceeding. If you proceed, prefer using temporary/limited tokens and avoid uploading sensitive content.