Dalong Video Frames
PassAudited by ClawScan on May 6, 2026.
Overview
This skill appears to do only what it claims: use ffmpeg to extract a frame from a user-specified local video.
This looks safe for its stated purpose. Install it if you are comfortable installing ffmpeg, and make sure any --out path points somewhere safe because the generated frame may overwrite an existing file.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the agent or user chooses an important existing file as --out, that file could be overwritten.
The script creates the parent directory for the requested output path and runs ffmpeg with -y, which overwrites an existing output file without prompting. This is purpose-aligned but worth noticing.
mkdir -p "$(dirname "$out")" ... ffmpeg -hide_banner -loglevel error -y ... "$out"
Use explicit temporary or project-specific output paths and avoid pointing --out at important existing files.