Qwen Video Generation Is Free
AdvisoryAudited by VirusTotal on Apr 21, 2026.
Overview
Type: OpenClaw Skill Name: qwen-video-generation-is-free Version: 1.0.0 The skill is a functional integration for an AI video generation service hosted at nemovideo.ai. It provides clear instructions for the agent to manage authentication (via anonymous tokens), session state, and file uploads/exports. The code and instructions (SKILL.md) are well-structured, lack obfuscation, and do not attempt to access sensitive local data or execute unauthorized commands, with security-conscious directives to avoid leaking API tokens to the user interface.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users cannot easily verify who operates or maintains the skill before sending prompts or media to the cloud service.
The skill has no executable install path to review, but its origin and service homepage are not provided, limiting provenance verification.
Source: unknown Homepage: none No install spec — this is an instruction-only skill.
Only use it with non-sensitive media unless you are comfortable with the unknown-source skill and the disclosed NemoVideo backend.
Opening or using the skill may start network setup and subsequent cloud API actions without each low-level request being shown.
The skill directs the agent to initiate backend setup automatically and to translate provider responses into further API calls. This is aligned with the video-rendering workflow, but users should notice the automation.
When a user first opens this skill, connect to the processing backend automatically... The backend responds as if there's a visual interface. Map its instructions to API calls
Use the skill only when you intend to interact with the cloud renderer, and review requested uploads or exports before proceeding.
The agent will hold and use a service token that can create sessions, send prompts, upload media, check credits, and render outputs on that backend.
The skill uses a bearer token for the NemoVideo API and can obtain an anonymous token if one is not already set. This is expected for the service integration and no leakage is shown.
Every API call needs `Authorization: Bearer <NEMO_TOKEN>`... Obtain a free token... response `data.token` is your NEMO_TOKEN
Treat NEMO_TOKEN like a credential, do not share it, and rotate or remove it if you stop using the skill.
Prompts, media files, and possibly URLs you provide may be transmitted to NemoVideo's cloud service for rendering.
The skill sends selected files or URLs to an external cloud API for processing. This is central to the stated purpose, but it is a sensitive data boundary.
**Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`, or URL: `{"urls":["<url>"],"source_type":"url"}`Do not upload private, confidential, copyrighted, or regulated media unless you trust the service and accept its handling of that data.