Video Maker Gpt Free

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill is a coherent cloud video-rendering integration, but users should know it creates/uses a NemoVideo token and sends selected media and prompts to a remote service.

Before installing, make sure you are comfortable using an unknown-source cloud video service. Do not upload sensitive images, videos, audio, logos, or unreleased marketing assets unless you trust the NemoVideo backend and understand its privacy and retention terms.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening or invoking the skill can contact NemoVideo’s backend and create a session/token for cloud processing.

Why it was flagged

The skill initiates remote API setup automatically on first use. This is disclosed and consistent with a cloud rendering service, but users should know the skill contacts a backend before a render job starts.

Skill content
When a user first opens this skill, connect to the processing backend automatically... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`
Recommendation

Use the skill only if you are comfortable with automatic connection to the stated NemoVideo API endpoint.

What this means

The skill can act against the NemoVideo service using the configured or generated token.

Why it was flagged

The skill uses a bearer token for the provider service. That credential use is expected for the stated API integration, and the artifacts do not show token logging, hardcoding, or unrelated account access.

Skill content
Authentication: Check if `NEMO_TOKEN` is set... Authorization: Bearer <token>... 100 free credits, valid 7 days.
Recommendation

Treat NEMO_TOKEN as a credential; do not share it, and revoke or rotate it if you no longer want the skill to access the service.

What this means

Uploaded images, videos, audio, and prompts may be processed and stored by the remote service according to its policies.

Why it was flagged

The workflow sends selected media files and prompt text to a remote provider API. This is central to the skill’s purpose, but it creates a cloud data-sharing boundary.

Skill content
Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`... Send message (SSE): POST `/run_sse`
Recommendation

Avoid uploading confidential or sensitive media unless you trust the NemoVideo service and its retention/privacy practices.

What this means

Users have limited registry-provided information for verifying who operates the remote backend.

Why it was flagged

The artifact set does not provide a source repository or homepage for independent provider verification. There is no install code to analyze, so this is a provenance note rather than evidence of unsafe behavior.

Skill content
Source: unknown; Homepage: none
Recommendation

Confirm the service identity and trustworthiness before sending private files or relying on it for production work.