Image To Video Gemini

• Risk level: Low
• Analyzed: Apr 16, 2026, 6:36 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requested credential and runtime actions line up with a cloud-based image→video service, but there are small metadata inconsistencies and some privacy trade-offs (automatic anonymous token creation, potential local config use) you should be aware of before installing.

This skill appears to do what it says: remote image→video rendering using a single service token. Before installing, consider: (1) Do you trust the external domain (mega-api-prod.nemovideo.ai)? Network requests will send image files and session tokens to that service. (2) If you do not set NEMO_TOKEN, the skill will automatically request an anonymous token from the provider — decide whether you want the agent to obtain and possibly store that token. (3) The skill mentions a config path (~/.config/nemovideo/) in its frontmatter even though the registry said none; ask the author whether tokens/sessions are persisted to disk and where. (4) If privacy is a concern, avoid providing sensitive images or set a per-session token rather than a long-lived environment variable. If you need higher assurance, request the skill author to clarify the config-path behavior and provide a privacy/terms link for the backend service.