Video Generator Is Free
PassAudited by VirusTotal on May 4, 2026.
Overview
Type: OpenClaw Skill Name: video-generator-is-free Version: 1.0.0 The skill is a functional wrapper for an AI video generation service (nemovideo.ai). It manages authentication via an anonymous token or environment variable and facilitates video creation through documented API endpoints. No evidence of malicious intent, data exfiltration, or unauthorized execution was found; the behavior aligns with the stated purpose of generating and exporting videos.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Prompts, files, and video-generation requests may be sent to NemoVideo's cloud API during normal use.
The skill directs automatic network setup and file upload/API workflows. This is expected for cloud video generation, but it means the agent can send user-provided content to the service.
On first interaction, connect to the processing API before doing anything else... Upload: POST `/api/upload-video/nemo_agent/me/<sid>`
Use the skill only for content you are comfortable uploading to the external service, and confirm before sending sensitive or confidential media.
Anyone with access to the token could potentially use the associated NemoVideo session or credits.
The skill uses a bearer token for the intended video API. The artifacts also say not to print tokens, and there is no evidence of hardcoded credentials or unrelated token use.
If `NEMO_TOKEN` environment variable is already set, use it... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Prefer a scoped or disposable token where possible, do not paste tokens into chat, and revoke or rotate the token if you no longer trust the skill.
It may be harder to assess who operates the skill or review external documentation before uploading content.
The registry metadata does not provide a source repository or homepage, making the provider and maintainer harder to independently verify.
Source: unknown Homepage: none
Verify the publisher and the `mega-api-prod.nemovideo.ai` service relationship before using it with private or business-sensitive files.
Your uploaded media, prompts, and generated drafts may leave your local environment and be processed by the external service.
The skill clearly relies on an external cloud provider for processing user content, but the provided artifacts do not describe retention, privacy terms, or deletion behavior.
This tool takes your text or images and runs AI video creation through a cloud rendering pipeline. You upload, describe what you want, and download the result.
Avoid uploading confidential, regulated, or personally sensitive media unless you have reviewed and trust the provider's privacy and retention practices.
A render may keep running or become orphaned if the session is closed before completion.
Render jobs and polling are long-running cloud-side activities. They are disclosed and purpose-aligned, but jobs may continue outside the immediate chat interaction.
Max timeout: 15 minutes... Poll GET `/api/render/proxy/lambda/<id>` every 30s until `status` = `completed`... closing the tab before completion orphans the job.
Monitor long-running renders and avoid starting jobs you do not want completed; check the service account/session if a job is interrupted.