Text To Video Brainrot
PassAudited by VirusTotal on May 5, 2026.
Overview
Type: OpenClaw Skill Name: text-to-video-brainrot Version: 1.0.0 The skill bundle provides instructions for an AI agent to interface with the nemovideo.ai API to generate 'brainrot' style videos from text prompts. It includes standard procedures for authentication (via NEMO_TOKEN or anonymous UUID), session management, and handling media uploads/renders. The instructions are well-defined, include error handling, and do not exhibit signs of data exfiltration, malicious execution, or harmful prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill starts a connection to NemoVideo's service and may create a rendering session before a video is generated.
The skill automatically initiates a provider API session when used. This is disclosed and necessary for the cloud renderer, but users should know the skill makes outbound API calls immediately after invocation.
On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".
Install only if you are comfortable with automatic provider setup when invoking the skill; confirm export actions before spending credits.
The token may allow use of the associated NemoVideo credits or account permissions.
The skill uses a bearer token to authenticate to the NemoVideo API. This is expected for the service integration and the instructions tell the agent not to expose the token.
All requests must include: `Authorization: Bearer <NEMO_TOKEN>` ... Don't print tokens or raw JSON.
Use a service-specific token, keep it private, and rotate it if you suspect it was exposed.
Scripts, prompts, images, audio, or videos provided to the skill may leave the local environment and be processed by NemoVideo.
The skill sends prompts, uploaded media, and rendering/session data to an external cloud provider. This is central to the stated purpose, but it creates a data-sharing boundary users should notice.
Base URL: `https://mega-api-prod.nemovideo.ai` ... `/run_sse` ... `/api/upload-video/nemo_agent/me/<sid>` ... Accepted file types: mp4, mov, avi, webm, mkv, jpg, png, gif, webp, mp3, wav, m4a, aac.
Do not submit private, confidential, or rights-sensitive media unless you trust the provider and its terms.