Ai Video Creator Free Online

PassAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: ai-video-creator-free-online Version: 1.0.0 The skill facilitates cloud-based video creation by interfacing with the `nemovideo.ai` API. It includes well-defined procedures for anonymous authentication, session management, file uploads, and video rendering. All identified behaviors, including network communication and credential handling, are transparently documented and strictly aligned with the stated purpose of generating MP4 videos from user-provided assets.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Photos, videos, audio, prompts, and generated draft details may be processed by the external NemoVideo service.

Why it was flagged

The skill clearly sends user media and prompts to a third-party cloud backend for processing; this is purpose-aligned but means uploaded content leaves the local environment.

Skill content
This skill connects to a cloud processing backend... Upload: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Recommendation

Only upload media you are comfortable sending to that provider, and review the service’s privacy and retention terms before using sensitive content.

What this means

A token could allow video sessions, uploads, renders, credit checks, or account-related actions within the NemoVideo service.

Why it was flagged

The skill requires a bearer token for the NemoVideo API. This is expected for the integration, and the instructions say not to expose tokens, but it still grants the agent delegated access to that service.

Skill content
Look for `NEMO_TOKEN` in the environment... Include `Authorization: Bearer <NEMO_TOKEN>` ... on every request
Recommendation

Use a service-specific token if possible, avoid sharing broader account credentials, and revoke or rotate the token if you no longer trust the skill.

What this means

Using the skill may immediately create an anonymous token/session and communicate with the cloud backend.

Why it was flagged

The agent is instructed to automatically create or use a token and session before operating. This is disclosed and aligned with the cloud workflow, but users should know remote API actions may happen as part of invoking the skill.

Skill content
On first use, set up the connection automatically and let the user know ("Connecting...").
Recommendation

Invoke the skill only when you intend to use the external service, and confirm before uploading private files or exporting content.

What this means

Users have less information to confirm who maintains the integration or how the backend service is governed.

Why it was flagged

The skill has limited provenance information. There is no executable install payload, but the lack of a clear source or homepage makes it harder to verify the operator of a skill that handles user media.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the publisher and the nemovideo.ai service independently before uploading sensitive media or using a valuable account token.