Text To Video Game

• Risk level: Low
• Analyzed: Apr 16, 2026, 6:16 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions are coherent with a remote text-to-video rendering service: it only asks for a service token and describes API calls to an external render backend, with no unexpected installs or unrelated credentials.

This skill appears to do what it claims: it will upload your prompts and media to mega-api-prod.nemovideo.ai and use a NEMO_TOKEN (or an anonymous token it can fetch) to run cloud renders. Before installing, consider: (1) only provide content you are comfortable uploading to an external service; (2) verify the domain and review the service's privacy/terms if you care about IP or copyrighted content; (3) prefer setting NEMO_TOKEN as an environment variable rather than pasting tokens into chat; (4) the skill may detect its install path for attribution headers — avoid installing it in locations that reveal sensitive local info; and (5) anonymous tokens expire and exports may be gated by credits/subscription. If any of these are unacceptable, do not install or use the skill.