Image To Video Free Unrestricted

PassAudited by ClawScan on May 4, 2026.

Overview

The skill is coherent for cloud image-to-video generation, but users should understand it sends media to an external NemoVideo backend and uses a token/free-credit account.

This skill appears purpose-aligned for cloud video generation. Before installing, make sure you are comfortable sending images, prompts, and generated media to mega-api-prod.nemovideo.ai, keep NEMO_TOKEN secret, and verify the service's credit limits, pricing, and privacy terms.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Images, videos, audio, prompts, and generated drafts may be processed by the NemoVideo cloud service rather than remaining local.

Why it was flagged

The skill is explicitly designed to send user media and prompts to an external cloud backend. This is expected for image-to-video rendering, but users should notice the third-party data flow.

Skill content
This skill connects to a cloud processing backend... Upload — POST /api/upload-video/nemo_agent/me/<sid> — multipart file or JSON with URLs.
Recommendation

Only use media you are comfortable uploading to the external service, and check the provider's privacy and retention terms before sending sensitive content.

What this means

Anyone or any agent action using this token could make requests to the NemoVideo service and potentially spend available credits.

Why it was flagged

The skill obtains or uses a bearer token for remote API access. This is purpose-aligned, but the token controls the session and credits for the service.

Skill content
Look for `NEMO_TOKEN` in the environment... Otherwise: Generate a UUID as client identifier... Extract `data.token` from the response — this is your NEMO_TOKEN... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Keep NEMO_TOKEN private, use a dedicated token if possible, and monitor credit usage.

What this means

It may be harder to verify who operates the backend or where to review terms, support, or security documentation.

Why it was flagged

The skill has no install-time code, but the publisher/source provenance and homepage are not available for independent verification of the cloud service.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the service domain and provider reputation before relying on it for private or business media.

What this means

Users may overestimate how unrestricted or permanently free the service is.

Why it was flagged

The marketing says free and unrestricted, while the setup text indicates a limited free-credit token and payment-style 402 behavior if required headers are missing.

Skill content
without paywalls or content restrictions... NEMO_TOKEN (100 free credits, 7-day expiry)... exports return 402
Recommendation

Treat the service as a credit-based cloud provider and confirm limits, pricing, and content rules before use.