Voice To Video Ai

AdvisoryAudited by Static analysis on May 6, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using the skill will need to provide or generate a NemoVideo token, which authorizes video-generation requests for that session/account.

Why it was flagged

The skill uses a bearer token to access the NemoVideo backend. This is expected for the cloud video service, but users should understand the token grants session/API access.

Skill content
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a dedicated token for this service, avoid sharing it, and revoke or rotate it if you no longer trust the integration.

What this means

Audio or other uploaded media may leave your local environment and be processed on NemoVideo cloud systems.

Why it was flagged

The skill sends user-supplied media files to a remote backend for processing. This is central to the advertised functionality, but it is a third-party data flow.

Skill content
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Recommendation

Only upload files you are comfortable sending to the external service, especially if recordings contain private, confidential, or regulated information.

What this means

The skill may perform backend edit, status, upload, or export API steps without showing every low-level event to the user.

Why it was flagged

The skill instructs the agent to process backend tool events internally. This fits the integration workflow, but it means users may not see every intermediate remote action.

Skill content
Tool call/result | Process internally, don't forward
Recommendation

Ask for status summaries before export and review the final video output before using or posting it.

What this means

Users have limited external information for verifying who operates or maintains the integration.

Why it was flagged

The registry metadata does not provide a source repository or homepage for independent provenance review.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing only if you trust the publisher and the NemoVideo API endpoint listed in the skill.