ASCII Vision
Security checks across static analysis, malware telemetry, and agentic risk
Overview
ASCII Vision appears to be a local image-to-ASCII utility with no credential, network, persistence, or hidden execution behavior in the provided artifacts.
This looks safe for local image inspection. Before installing, be aware that it runs ffmpeg and Python on local files you choose; do not point batch examples at private directories unless you intend to process those images. The supplied SKILL.md text was truncated in the review context, so review the complete instructions if available.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run ffmpeg and Python on local image files you provide or select; no network transmission or credential use is shown.
The skill instructs use of local command-line tools to process image files. This is core to the skill's purpose and scoped to user-provided images, but it is still local command execution and file reading.
ffmpeg -y -i <image> -vf "scale=60:-1,format=gray" -frames:v 1 -f rawvideo pipe: 2>/dev/null \ | python3 scripts/ascii_viewer.py
Use it only on images you intend to inspect, avoid broad wildcards unless intended, and keep local ffmpeg/python installations trusted and up to date.
Some optional examples may use additional local utilities not reflected in the registry requirements.
The declared requirements list ffmpeg and python3, while optional examples also reference xxd, head, and ffprobe. This is a minor dependency-disclosure gap rather than hidden installation behavior.
requires:\n bins:\n - ffmpeg\n - python3 ... Color sampling via `ffmpeg + xxd` extracts RGB hex values
Treat those examples as optional, and the publisher should declare optional helper utilities or keep all examples within the declared dependencies.