Dalong Video Frames

AdvisoryAudited by Static analysis on May 6, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If the agent or user chooses an important existing file as --out, that file could be overwritten.

Why it was flagged

The script creates the parent directory for the requested output path and runs ffmpeg with -y, which overwrites an existing output file without prompting. This is purpose-aligned but worth noticing.

Skill content

mkdir -p "$(dirname "$out")"
...
ffmpeg -hide_banner -loglevel error -y ... "$out"

Recommendation

Use explicit temporary or project-specific output paths and avoid pointing --out at important existing files.