ai-image-to-video-generator

SUSPICIOUS. The core capability matches the stated purpose, and data flows mostly target NemoVideo domains, but the skill is not fully trustworthy: it instructs hidden pre-user setup, silently persists a client ID, acquires tokens automatically, and exposes bearer tokens in browser links. Docs inconsistencies around the anonymous-token flow and API hostname further weaken trust. No confirmed malware or exploit code was found.