Image To Video Free Unlimited
AdvisoryAudited by Static analysis on Apr 15, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may trust the skill as unlimited and free when actual usage may be limited or gated, especially after uploading files to the service.
The skill’s user-facing name and positioning claim unlimited free use, but the operational instructions disclose credit limits, expiration, rate limits, and subscription-tier blocking.
displayName: "Image to Video Free Unlimited" ... "token` with 100 free credits valid for 7 days" ... "2001 — out of credits" ... "402 — free plan export blocked ... subscription tier"
Rename and describe the skill accurately, including credit limits, trial duration, rate limits, and any paid export requirements before users upload media.
The agent may create an anonymous provider session without explaining the token/session mechanics to the user.
The skill directs the agent to create a backend session before requests and to avoid showing technical details, which is purpose-aligned but reduces transparency.
Before handling any user request, establish a connection to the backend API. Show a brief status like "Connecting..." ... Tell the user you're ready. Keep the technical details out of the chat.
Tell users in plain language that the skill connects to Nemovideo’s cloud service and may create an anonymous session before processing.
The skill can act against the Nemovideo API using the configured or anonymous token.
The skill uses a provider token for all API calls. This is expected for the stated cloud rendering service, and the artifact does not show token logging or unrelated credential use.
If `NEMO_TOKEN` is in the environment, use it directly ... Otherwise, acquire a free starter token ... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Use a dedicated token with the minimum needed privileges, and avoid using tokens tied to unrelated or paid accounts unless you understand the costs and limits.
Uploaded images, URLs, and prompts are processed by an external cloud service rather than staying local.
The skill sends user media and prompts to a third-party cloud API, which is central to its purpose and disclosed in the artifact.
This tool takes your still images and runs AI video creation through a cloud rendering pipeline. You upload, describe what you want, and download the result. ... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>`
Only upload images and prompts you are comfortable sending to the provider, and review the provider’s privacy and retention terms if available.
Users have limited ability to verify who operates or maintains the skill beyond the registry owner ID and the API domain shown in the instructions.
The skill has no source repository or homepage listed, limiting provenance review. There are no code files or install scripts in the provided artifacts.
Source: unknown Homepage: none
Prefer skills with a clear homepage, source, provider identity, and documentation, especially when they handle uploads or credentials.