Genv Ai Video Generator
PassAudited by ClawScan on May 16, 2026.
Overview
This skill appears purpose-aligned for cloud AI video generation, but users should know it sends prompts or uploaded media to a third-party video backend and uses a service token.
This looks like a normal instruction-only cloud video generation skill. Before installing, be aware that prompts and uploaded files may be sent to mega-api-prod.nemovideo.ai, and that the NEMO_TOKEN/session data should be treated as sensitive. Avoid using confidential media unless you trust the service.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Files or prompts you provide may be uploaded to NemoVideo’s cloud service for processing.
The skill is designed to send user-provided prompts and media files to a cloud video backend. This is expected for AI video generation, but users should understand that selected content leaves the local environment.
Upload your text prompts or images (MP4, MOV, PNG, JPG, up to 200MB)... and download 1080p MP4 when it's done.
Only use the skill with media and prompts you are comfortable sending to the third-party backend.
The agent may create sessions, submit generation requests, check status, and export videos through the service API as part of normal use.
The skill documents a multi-step API workflow including long-running SSE, uploads, state queries, exports, and polling. These are coherent with rendering videos, but they give the agent operational authority over cloud render jobs.
The main endpoints: ... Chat (SSE) — POST /run_sse ... Upload ... Credits ... State ... Export ... Poll GET /api/render/proxy/lambda/<id> every 30s
Review requested actions before asking for generation or export, especially if using a token tied to credits or paid usage.
The skill will authenticate to the video service using NEMO_TOKEN or a generated anonymous token.
The skill uses a service token for authentication and can obtain an anonymous token if one is not already present. This is purpose-aligned, and the artifact also instructs not to expose tokens.
Token check: Look for `NEMO_TOKEN` in the environment... Otherwise... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Extract `data.token` from the response
Use a dedicated token if possible and avoid sharing logs or transcripts that might reveal credentials.
Session state may link your uploaded media, prompts, drafts, and render jobs during the task.
The skill maintains a session identifier to connect related render, upload, state, and export calls. This appears limited to the service workflow, but session identifiers can expose access to in-progress work if mishandled.
Keep the returned `session_id` for all operations.
Avoid exposing session IDs or raw API responses, and be cautious with sensitive media or confidential prompts.