Kiss Video Maker Free App
PassAudited by ClawScan on May 4, 2026.
Overview
This appears to be a coherent cloud video-making skill, but it uploads user media to a NEMO backend using an API token, so users should be comfortable with that data sharing.
This skill is not showing hidden code or destructive behavior in the provided artifacts. The main thing to consider is trust: it sends your uploaded photos, clips, and audio to a remote NEMO video service using a bearer token, and the listing does not provide a homepage or source for independent verification. Avoid uploading private or intimate media unless you are comfortable with that provider handling it.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users have less provenance information for deciding whether to trust the remote video service.
The skill has no public source or homepage listed, which makes the remote service and publisher harder for a user to verify before sending files.
Source: unknown; Homepage: none
Verify the provider and avoid uploading sensitive media unless you are comfortable with the unknown-source service.
Anyone with access to the token could act against the associated NEMO session or credits.
The skill uses a bearer token for the NEMO backend; this is expected for the cloud rendering workflow but is still delegated session/account authority.
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Use a scoped or disposable token where possible, and do not share NEMO_TOKEN outside the intended environment.
Personal or romantic media uploaded for rendering will be handled by the remote NEMO service.
The skill is designed to process uploaded media on an external backend, so user photos, clips, and audio may leave the local environment.
The AI romantic video creation runs on remote GPU nodes — nothing to install on your machine.
Only upload files you intend to share with that service, and check the provider’s privacy and retention terms if the media is sensitive.
Users may not see the operational details of the remote API connection during normal use.
The agent may not proactively explain token/session/API details to the user, even though the artifacts disclose them.
Tell the user you're ready. Keep the technical details out of the chat.
Before uploading private media, ask the agent where files are sent and what account or token will be used.