Text To Video Automatic

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill appears coherent for cloud text-to-video generation, but it will use or create a Nemo token and send prompts or uploaded media to an external rendering service.

This skill is not showing evidence of malicious behavior in the provided artifacts. Before installing, understand that it relies on Nemovideo's cloud API, may create an anonymous token, and may upload your prompts or media files for rendering. Use it with non-sensitive content unless you have verified the provider's privacy, retention, and credit policies.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The token gives the agent access to a Nemo video session and any associated credits or generated content for that service.

Why it was flagged

The skill uses a bearer token, and if one is absent it obtains an anonymous service token for the Nemo video backend.

Skill content
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Every API call needs `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a dedicated token if possible, avoid sharing the token, and review Nemo account or credit usage if the service behaves unexpectedly.

What this means

Product text, scripts, images, audio, or video files may leave the local environment and be processed by Nemovideo's backend.

Why it was flagged

Prompts, messages, and uploaded media are sent to a third-party cloud API for processing.

Skill content
This skill connects to a cloud processing backend... **Send message (SSE)**: POST `/run_sse`... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>`
Recommendation

Do not submit confidential or regulated content unless you trust the provider and have reviewed its privacy and retention practices.

What this means

Once invoked, the agent may create sessions, send prompts, start render jobs, poll status, or export videos without showing each raw API step.

Why it was flagged

The skill instructs the agent to automatically perform backend API operations and translate provider responses into further API calls.

Skill content
On first use, set up the connection automatically... "click" or "点击" → execute the action via the relevant endpoint... "Export" or "导出" → run the export workflow
Recommendation

Ask the agent to confirm before uploading files, spending credits, or exporting if you want tighter control over cloud actions.

What this means

Users have limited provenance information to verify who maintains the skill before sending data to the referenced cloud API.

Why it was flagged

The registry artifacts do not provide a verified source repository or homepage for the skill or service integration.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the publisher and the nemovideo.ai service independently before using the skill with sensitive content.