Text To Video Kiss

• Verdict: Pass
• Confidence: Medium
• Analyzed: Apr 16, 2026, 7:39 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's declared purpose (remote text→video generation) matches the credentials and API calls it instructs the agent to make, but it will upload user files and issue network requests to an unvetted backend — review and trust the remote service before use.

This skill is internally consistent for a cloud text→video tool, but it relies entirely on a remote backend (mega-api-prod.nemovideo.ai) that has no visible homepage or reputation in the package metadata. Before installing or using it: (1) Decide whether you trust that backend — the skill will upload files and prompts (potentially sensitive) for remote processing. (2) Prefer setting your own NEMO_TOKEN (if you have an account) rather than letting the skill obtain an anonymous token for you. (3) Avoid uploading private or regulated content (PII, secrets, or minors) unless you have reviewed the service's privacy/TOS. (4) Note the skill reads environment and install/config paths to derive headers — this is used for attribution but could reveal platform info. If you need higher assurance, ask the publisher for a homepage or privacy policy and an explicit security/privacy statement before proceeding.