Ai Video Creator Free Online
AdvisoryAudited by Static analysis on May 6, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Photos, videos, audio, prompts, and generated draft details may be processed by the external NemoVideo service.
The skill clearly sends user media and prompts to a third-party cloud backend for processing; this is purpose-aligned but means uploaded content leaves the local environment.
This skill connects to a cloud processing backend... Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Only upload media you are comfortable sending to that provider, and review the service’s privacy and retention terms before using sensitive content.
A token could allow video sessions, uploads, renders, credit checks, or account-related actions within the NemoVideo service.
The skill requires a bearer token for the NemoVideo API. This is expected for the integration, and the instructions say not to expose tokens, but it still grants the agent delegated access to that service.
Look for `NEMO_TOKEN` in the environment... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Use a service-specific token if possible, avoid sharing broader account credentials, and revoke or rotate the token if you no longer trust the skill.
Using the skill may immediately create an anonymous token/session and communicate with the cloud backend.
The agent is instructed to automatically create or use a token and session before operating. This is disclosed and aligned with the cloud workflow, but users should know remote API actions may happen as part of invoking the skill.
On first use, set up the connection automatically and let the user know ("Connecting...").Invoke the skill only when you intend to use the external service, and confirm before uploading private files or exporting content.
Users have less information to confirm who maintains the integration or how the backend service is governed.
The skill has limited provenance information. There is no executable install payload, but the lack of a clear source or homepage makes it harder to verify the operator of a skill that handles user media.
Source: unknown; Homepage: none
Verify the publisher and the nemovideo.ai service independently before uploading sensitive media or using a valuable account token.