Motion Graphics Generator
PassAudited by ClawScan on May 6, 2026.
Overview
The skill is a coherent cloud motion-graphics generator, but it sends user-provided media and prompts to an external NemoVideo API and uses a bearer token/session.
This skill appears purpose-aligned for generating motion graphics in the cloud. Before installing, make sure you are comfortable sending your uploaded images, videos, audio, prompts, and project details to the NemoVideo API, and protect any NEMO_TOKEN you use.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Media, prompts, and project details may be processed by the external NemoVideo service.
The skill sends prompts, files, URLs, session state, and render requests to an external cloud backend. This is expected for cloud rendering, but it creates an external data boundary.
This skill connects to a cloud processing backend... API base: `https://mega-api-prod.nemovideo.ai`... Upload: POST `/api/upload-video/nemo_agent/me/<sid>`
Only upload content you are comfortable sending to that service, and avoid confidential or regulated media unless you trust the provider and its terms.
A leaked token could allow access to the associated service session or credits until it expires or is revoked.
The skill uses or creates a bearer token for the external service. This is disclosed and aligned with the integration, but the token should be treated as a credential.
Look for `NEMO_TOKEN` in the environment... POST `https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token`... Include `Authorization: Bearer <NEMO_TOKEN>`
Use a dedicated/revocable token where possible, do not paste tokens into chat, and monitor credit usage.
Edits, state queries, or exports may be performed as part of the backend-guided workflow rather than only from explicit step-by-step user commands.
The skill tells the agent to translate backend GUI-style messages into API actions. This is coherent for a GUI-backed cloud workflow, but it means backend responses can drive follow-on actions.
Backend says | You do ... "click [button]" / "点击" | Execute via API ... "Export button" / "导出" | Execute export workflow
Keep actions scoped to the user's requested video task, and ask for confirmation before uploading new files, exporting, or performing any action with cost or account impact.
Users have less information for deciding whether to trust the skill and external service.
The registry metadata does not provide a source repository or homepage, limiting independent verification of the integration and backend relationship.
Source: unknown; Homepage: none
Install only if you trust the registry publisher and the NemoVideo API domain, and prefer skills with clear provenance for sensitive work.