Mux
v1.0.0Mux video — manage assets, live streams, playback IDs, and analytics via REST API
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the requested environment variables and the included CLI: MUX_TOKEN_ID and MUX_TOKEN_SECRET are exactly what a Mux REST CLI would need. No unrelated services or credentials are requested.
Instruction Scope
SKILL.md instructs running the provided Python CLI and does not ask for unrelated data. The script does attempt to read credentials from an optional .env file under WORKSPACE or ~/.openclaw/workspace if env vars are not set, which is a minor scope extension (it only extracts the named MUX_* entries). There are no instructions to read arbitrary user files or to transmit data to domains other than api.mux.com.
Install Mechanism
No install spec or third‑party downloads; the tool is instruction-only plus a single local Python script using only the stdlib. This is low-risk from an install perspective.
Credentials
The required env vars (MUX_TOKEN_ID, MUX_TOKEN_SECRET) are proportional to the stated purpose. The script also consults WORKSPACE (if set) to locate a .env file, which is not declared in the metadata — this is a convenience behavior but worth noting because it reads a file if present.
Persistence & Privilege
The skill does not request 'always' presence, does not modify other skills or system settings, and has no install step that persists executable code outside its script file.
Assessment
This appears to be a straightforward Mux CLI that needs your Mux token ID and secret. Before installing: (1) ensure you are comfortable providing MUX_TOKEN_ID and MUX_TOKEN_SECRET (these are necessary for API access); (2) be aware the script will try to read a .env file under $WORKSPACE or ~/.openclaw/workspace if the env vars are missing — if you keep other secrets in that file, review it first; (3) review the included scripts/mux.py yourself (it’s short and stdlib-only) to verify behavior; and (4) run the tool in a restricted/test environment if you want to limit blast radius. The code contains minor implementation oddities (nonstandard conditional and small argument-name bugs) but no evidence of hidden exfiltration or unrelated network access.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
🎬 Clawdis
EnvMUX_TOKEN_ID, MUX_TOKEN_SECRET
Primary envMUX_TOKEN_ID
latest
🎬 Mux
Mux video — manage assets, live streams, playback IDs, and analytics via REST API
Requirements
| Variable | Required | Description |
|---|---|---|
MUX_TOKEN_ID | ✅ | API token ID |
MUX_TOKEN_SECRET | ✅ | API token secret |
Quick Start
# List assets
python3 {{baseDir}}/scripts/mux.py assets --limit <value>
# Get asset
python3 {{baseDir}}/scripts/mux.py asset-get id <value>
# Create asset
python3 {{baseDir}}/scripts/mux.py asset-create --url <value> --playback_policy <value>
# Delete asset
python3 {{baseDir}}/scripts/mux.py asset-delete id <value>
# Get input info
python3 {{baseDir}}/scripts/mux.py asset-input-info id <value>
# List playback IDs
python3 {{baseDir}}/scripts/mux.py asset-playback-ids id <value>
# List live streams
python3 {{baseDir}}/scripts/mux.py live-streams
# Get live stream
python3 {{baseDir}}/scripts/mux.py live-stream-get id <value>
All Commands
| Command | Description |
|---|---|
assets | List assets |
asset-get | Get asset |
asset-create | Create asset |
asset-delete | Delete asset |
asset-input-info | Get input info |
asset-playback-ids | List playback IDs |
live-streams | List live streams |
live-stream-get | Get live stream |
live-stream-create | Create live stream |
live-stream-delete | Delete live stream |
live-stream-reset-key | Reset stream key |
uploads | List uploads |
upload-create | Create direct upload |
views | List video views |
metrics | Get metrics |
monitoring | Monitoring metrics |
Output Format
All commands output JSON by default. Add --human for readable formatted output.
python3 {{baseDir}}/scripts/mux.py <command> --human
Script Reference
| Script | Description |
|---|---|
{{baseDir}}/scripts/mux.py | Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
Comments
Loading comments...
