Mockup Video Generator Free

PassAudited by ClawScan on Apr 30, 2026.

Overview

This instruction-only skill is coherent for cloud mockup video generation, but it will connect to a third-party service, upload your media, and use or create a Nemo token.

Before installing or invoking this skill, make sure you are comfortable uploading your images or videos to NemoVideo, using or creating a NEMO_TOKEN, and accepting any credit, registration, or export limits tied to the service.

Findings (8)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Invoking the skill may cause the agent to contact the service before answering or doing other work.

Why it was flagged

This explicitly prioritizes connecting to the provider API at the start of use. It is aligned with the video-generation purpose, but it does force an initial external setup action.

Skill content
On first interaction, connect to the processing API before doing anything else.
Recommendation

Use the skill only when you are ready for it to connect to the NemoVideo processing service.

What this means

Your selected media may be uploaded and cloud render/export jobs may be started, potentially consuming credits.

Why it was flagged

The skill can upload user files or URLs and start cloud export jobs. These are normal for the stated mockup-video purpose, but they are impactful external actions.

Skill content
/api/upload-video/nemo_agent/me/<sid> | POST | Upload a file (multipart) or URL. ... /api/render/proxy/lambda | POST | Start export.
Recommendation

Only provide files you intend to process, and confirm export/download actions before using credits or sharing sensitive media.

What this means

A configured NemoVideo token may authorize work under your account and may consume available credits.

Why it was flagged

The skill uses a NemoVideo bearer token for API calls and includes a token-handling privacy instruction. This credential use is expected for the service integration.

Skill content
If `NEMO_TOKEN` environment variable is already set, use it ... Include `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Recommendation

Use a token intended for this service, avoid sharing it, and monitor credit or account usage.

What this means

It may be harder to independently verify who maintains the skill or the provider integration.

Why it was flagged

The registry metadata does not provide a clear source or homepage for the skill, limiting provenance review. No install script or code dependency is present.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify that the NemoVideo service and token flow are acceptable before uploading files or using account credentials.

What this means

Project state, generated media references, and session identifiers may remain associated with the cloud editing session.

Why it was flagged

The skill keeps and reuses provider session state and retrieves draft/media state from the cloud service. This is expected for an editing workflow, but it means context persists in the service session.

Skill content
Save `session_id` from the response. ... /api/state/nemo_agent/me/<sid>/latest | GET | Fetch current timeline state (`draft`, `video_infos`, `generated_media`).
Recommendation

Avoid uploading confidential materials unless you are comfortable with the provider storing session and project state.

What this means

Prompts, media, and editing state may be sent to and processed by the NemoVideo cloud service.

Why it was flagged

The skill communicates with a named external provider over API and SSE streams. The destination and bearer-auth requirement are disclosed, and this communication is purpose-aligned.

Skill content
Base URL: `https://mega-api-prod.nemovideo.ai` ... `/run_sse` | POST | Send a user message ... Stream response with `Accept: text/event-stream`.
Recommendation

Review the files and prompts you send, especially if they contain private product, customer, or unreleased app content.

What this means

A render may continue or become orphaned if the session is interrupted, potentially wasting time or credits.

Why it was flagged

The artifact discloses that cloud render jobs can continue without the local session, which may leave work running or difficult to recover.

Skill content
The session token carries render job IDs, so closing the tab before completion orphans the job.
Recommendation

Keep the session open until completion and check provider status or credits if a render is interrupted.

What this means

You may be able to start generation for free but encounter limits or upgrade prompts when exporting.

Why it was flagged

The skill is branded as free but also documents a possible export block requiring registration or upgrade. The limitation is disclosed, but users should notice the freemium tradeoff.

Skill content
displayName: "Mockup Video Generator Free" ... `402` | Free plan export blocked | ... "Register or upgrade your plan to unlock export."
Recommendation

Check the service's credit, registration, and export limits before relying on it for time-sensitive work.