Ai Generator Video

PassAudited by ClawScan on May 4, 2026.

Overview

This skill is coherently designed to send user-provided prompts and media to a NemoVideo cloud API to generate videos, with expected token-based authentication and no code installation shown.

Before installing, be comfortable with sending prompts and uploaded media to the NemoVideo cloud API and with using a NEMO_TOKEN or anonymous service token. Avoid uploading confidential media unless the provider’s privacy and retention terms meet your needs.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When invoked for video creation, the agent may start remote processing jobs and exports, which may use service credits or plan limits.

Why it was flagged

The skill directs the agent to call remote API endpoints and start generation/export workflows as part of normal use. This is disclosed and central to the video-generation purpose.

Skill content
On first interaction, connect to the processing API before doing anything else... `/run_sse` | POST | Send a user message... `/api/render/proxy/lambda` | POST | Start export.
Recommendation

Use the skill only for intended video-generation tasks and review export or credit-related actions before proceeding.

What this means

The token can authorize video-generation sessions or credit usage for the associated NemoVideo account or anonymous client.

Why it was flagged

The skill uses a bearer token or generated anonymous token to authenticate with the NemoVideo API. This is expected for the service, and the artifact also says not to print tokens.

Skill content
If `NEMO_TOKEN` environment variable is already set, use it... Free token: Generate a UUID as client identifier, then POST... The response field `data.token` becomes your NEMO_TOKEN... Include `Authorization: Bearer <NEMO_TOKEN>`.
Recommendation

Use a token intended for this service, avoid sharing it in prompts or logs, and rotate/revoke it if exposed.

What this means

Private brand photos, product descriptions, audio, or video files may leave the local environment and be processed by a third-party service.

Why it was flagged

The documented workflow sends user prompts, images, videos, audio, or URLs to an external NemoVideo API for processing.

Skill content
Send me your text or images... The AI video creation runs on remote GPU nodes... `/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL.
Recommendation

Upload only content you are comfortable sending to the external provider, and review the provider’s privacy and retention terms for sensitive materials.