Image To Video Mp4

• Risk level: Low Risk
• Analyzed: Apr 21, 2026, 6:33 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions are coherent with an image-to-video cloud rendering service: it needs a NEMO_TOKEN and sends user images to nemovideo's API; nothing in the package suggests hidden or unrelated access.

This skill appears to do what it says: it will upload images you give it to nemovideo's cloud API and return an MP4. Before installing/use: 1) Confirm you trust the domain https://mega-api-prod.nemovideo.ai and the service's privacy policy because your images (and any embedded metadata) will be transmitted off-device. 2) Prefer using an anonymous or limited-scope token rather than a long-lived account token; anonymous tokens the skill describes expire in 7 days. 3) Be cautious about allowing access to local config (~/.config/nemovideo/) or arbitrary file paths—only provide the images you intend to upload. 4) If you need stronger guarantees, ask the skill author to clarify why it needs to read local config/install-paths and whether session tokens are persisted or only kept in-memory.