Image To Video Loop Ai
PassAudited by ClawScan on May 11, 2026.
Overview
The skill is a coherent cloud image-to-video helper, but it uses a NemoVideo token and sends selected media and prompts to a remote backend.
This appears reasonable for a cloud image-to-video service. Before using it, confirm you trust the NemoVideo backend, use only an appropriate NEMO_TOKEN, watch for credit usage on export, and avoid uploading sensitive media unless you are comfortable with cloud processing.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Opening or using the skill can initiate a remote NemoVideo session and later consume service credits for rendering.
The skill directs the agent to make remote API calls during setup. This is disclosed and central to the cloud-rendering purpose, but users should know the backend connection can happen automatically when the skill is opened.
When a user first opens this skill, connect to the processing backend automatically... Create a session: POST to `https://mega-api-prod.nemovideo.ai/api/tasks/me/with-session/nemo_agent`
Use it only if you are comfortable with automatic setup calls to the NemoVideo backend and monitor credit usage when exporting.
Anyone using a configured NEMO_TOKEN is delegating access to the NemoVideo account/session associated with that token.
The skill uses a bearer token for the stated provider API. This is expected for the service and the artifact says not to display token values, with no evidence of unrelated credential use.
Include `Authorization: Bearer <NEMO_TOKEN>` and all attribution headers on every request
Provide only a NemoVideo token intended for this service, avoid sharing it elsewhere, and rotate/remove it if you stop using the skill.
Selected media and task prompts are processed outside the local device by the NemoVideo backend.
The workflow sends user-selected media to a remote cloud API for processing. This is purpose-aligned and disclosed, but uploaded images, videos, audio, and prompts may contain private content.
`/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL.
Upload only files you are comfortable sending to the cloud, especially if they contain people, locations, business assets, or other sensitive information.
It may be harder to verify who operates the integration or review external service terms before uploading media.
The package has limited provenance information. There is no local install code in the provided artifacts, but the skill relies on an external backend, so users have less independent context about the publisher or service.
Source: unknown; Homepage: none
Verify the provider and terms through trusted channels before using the skill with sensitive or valuable content.