Text To Video Deevid

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherently designed to send user-provided prompts or media to a disclosed cloud video API, with expected token-based access and no artifact-backed malicious behavior.

This skill appears purpose-aligned and instruction-only. Before installing, understand that it connects to NemoVideo’s cloud API, may use or create a service token, and can upload your prompts or selected media for rendering. Do not use it with sensitive content unless you are comfortable sharing that content with the provider.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your prompt text and any selected media may be sent to the NemoVideo backend to generate or edit videos.

Why it was flagged

The skill instructs the agent to call external API endpoints and upload user-selected content, which is expected for cloud video generation but is still a capability users should notice.

Skill content
Base URL: `https://mega-api-prod.nemovideo.ai` ... `/run_sse` | POST | Send a user message ... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file
Recommendation

Only submit prompts and files you are comfortable processing through this external service, and review outputs before using or publishing them.

What this means

The skill can use your NemoVideo token, or request an anonymous starter token, to create sessions and consume service credits.

Why it was flagged

The skill uses a provider token for authentication. This is consistent with the video service integration and there is no evidence of hardcoded credentials, unrelated account access, or token leakage.

Skill content
**If `NEMO_TOKEN` is in the environment**, use it directly and create a session. Otherwise, acquire a free starter token
Recommendation

Use a token intended for this service and monitor credit usage if you provide a paid or registered account token.

What this means

Text prompts, scripts, and uploaded media may leave the local environment for cloud processing.

Why it was flagged

The artifact discloses that user content is processed by an external cloud backend. The destination is named, but users should still treat this as a third-party data flow.

Skill content
This tool takes your text prompts and runs AI video creation through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Recommendation

Avoid submitting confidential scripts, unreleased assets, or personal media unless you trust the provider’s handling of that data.