video2imgs-视频关键帧获取

Security checks across malware telemetry and agentic risk

Overview

This is a local video-frame extraction helper whose disk output is expected, with a low-risk privacy and cleanup consideration for extracted images.

Install only if you want ffmpeg-based local frame extraction. Choose secure output folders, avoid extracting frames from confidential videos without approval, and clean up generated images when they are no longer needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

Confidence: 81% confidence
Finding: The skill instructs users to write captured frames to disk but does not warn that it may generate many image files containing sensitive visual content from the source video. In environments processing confidential recordings, this can lead to unintentional data proliferation, storage bloat, or retention of screenshots that are easier to exfiltrate or mishandle than the original video.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal