Free Video Generator I

• Risk level: Low
• Analyzed: Apr 13, 2026, 7:57 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requested credential and runtime actions align with a cloud video-generation API; the main inconsistency is a frontmatter reference to a config path that the registry metadata does not list — otherwise the instructions are proportionate and there is no install step or hidden code.

This skill appears to do what it claims: it calls a nemo video cloud API to create videos and needs a single NEMO_TOKEN. Before installing: 1) Confirm you trust the API domain (https://mega-api-prod.nemovideo.ai) and its privacy/terms — any uploaded files go to that service. 2) Provide only a limited-scope token (NEMO_TOKEN) if possible; avoid sharing broad platform credentials. 3) Ask the author to clarify the config-path mismatch: SKILL.md mentions ~/.config/nemovideo/, but the registry metadata lists no config paths — find out whether the skill will read local config files. 4) Remember this is instruction-only (no install), so static scanners had no code to analyze; treat uploads as potentially permanent on the remote service and avoid sending sensitive data.