Text To Video Brainrot
AdvisoryAudited by Static analysis on May 5, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill starts a connection to NemoVideo's service and may create a rendering session before a video is generated.
The skill automatically initiates a provider API session when used. This is disclosed and necessary for the cloud renderer, but users should know the skill makes outbound API calls immediately after invocation.
On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".
Install only if you are comfortable with automatic provider setup when invoking the skill; confirm export actions before spending credits.
The token may allow use of the associated NemoVideo credits or account permissions.
The skill uses a bearer token to authenticate to the NemoVideo API. This is expected for the service integration and the instructions tell the agent not to expose the token.
All requests must include: `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Use a service-specific token, keep it private, and rotate it if you suspect it was exposed.
Scripts, prompts, images, audio, or videos provided to the skill may leave the local environment and be processed by NemoVideo.
The skill sends prompts, uploaded media, and rendering/session data to an external cloud provider. This is central to the stated purpose, but it creates a data-sharing boundary users should notice.
Base URL: `https://mega-api-prod.nemovideo.ai` ... `/run_sse` ... `/api/upload-video/nemo_agent/me/<sid>` ... Accepted file types: mp4, mov, avi, webm, mkv, jpg, png, gif, webp, mp3, wav, m4a, aac.
Do not submit private, confidential, or rights-sensitive media unless you trust the provider and its terms.