Video Generation Chinese

• Risk level: Low
• Analyzed: Apr 29, 2026, 5:03 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill appears to do what it says (cloud video generation) and only requests a single service token, but there are small metadata/instruction inconsistencies and no public source or homepage — exercise caution before providing credentials or private media.

This skill is broadly consistent with its stated purpose: it needs a NEMO_TOKEN to call a remote video-generation API and will upload media you provide. Before installing or using it: (1) verify you trust the nemovideo.ai service (no homepage or source repository is provided), (2) avoid sending sensitive private data or secrets other than the NEMO_TOKEN, (3) expect the agent to make network calls (including an anonymous-token endpoint if no token is present) and to read install path(s) or a config path for attribution headers, and (4) ask the maintainer to clarify the small metadata inconsistencies (declared configPaths vs registry metadata, session language default, and the error-code wording) if you need strict guarantees. If you have concerns about confidentiality of uploaded media, don't use this skill until you confirm the provider's privacy/security policies.