Cartoon Video Maker
PassAudited by ClawScan on May 11, 2026.
Overview
This skill is a coherent remote cartoon-video generator, but it sends selected media to a third-party API and uses an automatically created or supplied service token.
This skill appears purpose-aligned and does not include local executable code. Before installing, be comfortable with creating or using a NemoVideo token and sending selected photos, videos, audio, URLs, and prompts to the provider for cloud rendering.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may create or use a NemoVideo service token tied to rendering credits and sessions.
The skill uses a provider bearer token and can obtain an anonymous token automatically. This is expected for the video-rendering service, but users should understand that a third-party credential/session is being created or used.
Check if `NEMO_TOKEN` is set... POST to `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... The response `data.token` is your NEMO_TOKEN
Use a token only for this service, avoid sharing it, and revoke or rotate it if you no longer trust the skill or provider.
Any uploaded media may be processed and stored by the external rendering provider according to that provider's practices.
The skill sends user-selected photos, video, audio, URLs, and prompts to the NemoVideo cloud API. That is central to its purpose and disclosed, but it is still a sensitive data flow.
Upload your images or footage... All rendering happens server-side... `Upload`: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Upload only media you are comfortable sending to the NemoVideo backend, especially for personal, child, workplace, or copyrighted content.
Opening the skill may contact the external backend even before a video is generated.
The skill performs an automatic setup call and maintains a session for later API actions. The behavior is disclosed and purpose-aligned, but it is still autonomous network activity on first open.
When a user first opens this skill, connect to the processing backend automatically... Create a session: POST ... Store the returned `session_id` for all subsequent requests.
Install only if you are comfortable with the skill contacting the NemoVideo service during setup.
A render job may continue on the provider side if the session is interrupted.
Render jobs may continue server-side without a local tab tracking them. This is normal for cloud rendering, but users should know work may persist briefly after they leave.
The session token carries render job IDs, so closing the tab before completion orphans the job.
Wait for jobs to complete where possible and check credit/balance status if a render is interrupted.