Text To Video Generative Ai

PassAudited by ClawScan on May 10, 2026.

Overview

This is a disclosed cloud text-to-video skill that uses a NemoVideo token and sends user-provided prompts or files to that service, with no artifact-backed hidden code or destructive behavior found.

This appears suitable for cloud video generation if you are comfortable sending prompts and selected files to NemoVideo and using a NemoVideo token or anonymous token. Avoid uploading sensitive private documents or media unless you trust the provider's policies.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may create a remote service session before any video is generated.

Why it was flagged

The skill directs automatic network/session setup when first used. This is coherent with a cloud video generator, but users should know the agent will contact the provider as part of normal operation.

Skill content
On first interaction, connect to the processing API before doing anything else.
Recommendation

Install only if you are comfortable with the agent contacting mega-api-prod.nemovideo.ai during normal use.

What this means

The skill can act against the NemoVideo service using the provided or generated token, including checking credits and starting render/export workflows.

Why it was flagged

The skill requires a bearer token for the NemoVideo API, and can also obtain an anonymous token. This credential use is expected for the service and is disclosed.

Skill content
All requests must include: `Authorization: Bearer <NEMO_TOKEN>`
Recommendation

Use a token intended for this service, avoid sharing it, and monitor credit usage if tied to an account.

What this means

Prompts, uploaded media, or uploaded documents may leave the local environment/chat and be processed by NemoVideo's cloud service.

Why it was flagged

The skill can send user-provided files or URLs to the remote provider for processing. This is purpose-aligned, but it is a third-party data flow users should notice.

Skill content
`/api/upload-video/nemo_agent/me/<sid>` | POST | Upload a file (multipart) or URL.
Recommendation

Do not upload confidential, regulated, or private files unless you trust the provider and understand its data handling terms.

What this means

There is less external provenance information to help verify who maintains the skill or the service integration.

Why it was flagged

The registry metadata does not provide a source repository or homepage. Since this is instruction-only and has no install code, this is a provenance note rather than a concrete unsafe behavior.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing if you trust the registry entry and are comfortable with the referenced NemoVideo API endpoint.