Kling Ai Free Image To Video

ReviewAudited by ClawScan on May 16, 2026.

Overview

The skill appears to provide image-to-video rendering, but it is branded as Kling AI while sending media and tokens to a NemoVideo backend, so users should review it before installing.

Install only if you are comfortable sending selected images, videos, audio, URLs, and prompts to `mega-api-prod.nemovideo.ai`. Avoid sensitive media, verify the provider relationship and free-credit/subscription terms, and ask for confirmation before uploads or exports.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users may believe they are using a Kling AI service while their prompts, media, and render jobs are handled by a different provider.

Why it was flagged

The user-facing branding names Kling AI, while the actual backend shown in the instructions is a NemoVideo domain; the artifacts do not explain the relationship.

Skill content
displayName: "Kling AI Free Image to Video — Convert Photos Into Video Clips" ... **API base**: `https://mega-api-prod.nemovideo.ai`
Recommendation

Treat the provider identity as unclear unless the publisher explains the relationship between Kling AI and the NemoVideo backend.

What this means

Private images, videos, audio, URLs, and prompts could be sent to the external processing service.

Why it was flagged

The skill sends user-selected media files or URLs to an external cloud agent/API, but the artifacts do not provide retention, privacy, or provider-boundary details.

Skill content
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`
Recommendation

Only submit media you are comfortable sharing with the NemoVideo backend, and avoid private or sensitive files unless the provider terms are acceptable.

What this means

Anyone with the token may be able to use the associated NemoVideo credits or session access while it remains valid.

Why it was flagged

The skill creates or uses a provider bearer token for credits and render sessions, which is expected for this cloud service but still grants account/session authority.

Skill content
Check if `NEMO_TOKEN` is set in the environment... The response `data.token` is your NEMO_TOKEN — 100 free credits, valid 7 days.
Recommendation

Keep the token private, avoid sharing logs that include authorization details, and rotate or remove it if you stop using the skill.

What this means

Opening or invoking the skill may contact the external backend and create a session automatically.

Why it was flagged

The agent is instructed to make automatic backend setup calls before a specific render request; this is service setup, but it is still an external action.

Skill content
When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").
Recommendation

If you want tighter control, ask the agent to confirm before connecting, uploading files, or starting exports.