Video Generator Ki Free

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only cloud video generator skill that discloses its NemoVideo token, session, upload, and render workflow, with no local executable code or hidden persistence found.

Install only if you are comfortable sending prompts and uploaded media to nemovideo.ai and using either your NEMO_TOKEN or an automatically created anonymous token. Do not upload private, regulated, or sensitive media unless you trust that external service.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Rogue Agent: Self-Modification, Session Persistence
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The routing table sends essentially all unmatched prompts to the generation/edit SSE action, creating an overly permissive trigger surface. In a skill that uploads media, creates sessions, and sends arbitrary user text to a remote backend, this increases the chance of unintended external actions or misuse when user intent is ambiguous.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill instructs the agent to automatically obtain or use authentication tokens, create backend sessions, and conceal those steps from the user. That combination reduces user awareness and consent around external network access and account/session creation, which is risky because files and prompts may be sent to third-party infrastructure without transparent disclosure.

Session Persistence

Medium

• Category: Rogue Agent

Content

version: "1.0.0"
displayName: "Video Generator Ki Free — Generate Videos Free with AI"
description: >
  Skip the learning curve of professional editing software. Describe what you want — generate a 30-second video from my product description for free — and get ready-to-share videos back in 1-2 minutes. Upload MP4, MOV, JPG, PNG files up to 200MB, and the AI handles AI video creation automatically. Ideal for students and social media creators who want to create videos without paying or learning complex tools.
metadata: {"openclaw": {"emoji": "🎬", "requires": {"env": ["NEMO_TOKEN"], "configPaths": ["~/.config/nemovideo/"]}, "primaryEnv": "NEMO_TOKEN", "variant": "greeting_v2"}}
---

• Confidence: 73% confidence
• Finding: create videos without paying or learning complex tools. metadata: {"openclaw": {"emoji": "🎬", "requires": {"env": ["NEMO_TOKEN"], "configPaths": ["~/.config

VirusTotal

65/65 vendors flagged this skill as clean.