Filmora Video Enhancer
v1.0.9Cloud-based video enhancement skill that uploads a user-selected local video file to Wondershare-hosted endpoints for AI enhancement, then downloads the proc...
⭐ 2· 262·0 current·0 all-time
byBing@double-ing
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a cloud video enhancer and the bundled script, declared brew install of ffmpeg, and network endpoints all align with that purpose. Minor inconsistency: the SKILL.md and script use/require ffprobe for metadata inspection, but the manifest's required binaries list only 'ffmpeg' (ffprobe is a separate binary provided by the ffmpeg package on many systems but should be explicitly listed).
Instruction Scope
SKILL.md instructs the agent to ask for explicit consent, validate a single local video file, read metadata via ffprobe, upload that file and limited metadata to specific Wondershare endpoints, poll for completion, and download the result. The instructions explicitly forbid scanning directories, modifying unrelated files, or uploading anything other than the chosen file; the script's visible logic follows that flow.
Install Mechanism
The only install action is a Homebrew formula to install ffmpeg, which is a standard and well-known package distribution method. No arbitrary downloads, third-party installers, or extracted archives are used.
Credentials
No credentials or environment variables are requested, which is proportionate. However the workflow collects and transmits metadata that may be privacy-sensitive: file MD5, duration, resolution, and a device identifier derived from hostname and MAC (hashed with SHA-256). These behaviors are declared in SKILL.md but are privacy-relevant and should be accepted explicitly by the user before use.
Persistence & Privilege
The skill is not always-enabled, does not request persistent elevated privileges, and does not modify other skills or system-wide agent settings. It runs as an on-demand script and requires explicit user invocation/consent per SKILL.md.
Assessment
This skill appears to do what it says: upload a single local .mp4/.mov file to Filmora/Wondershare cloud endpoints for AI enhancement and download the result. Before installing or running it, confirm the user explicitly consents to third‑party cloud processing and understands privacy implications (the tool sends file MD5, duration/size, and a SHA‑256 device identifier derived from hostname+MAC). Ensure ffprobe is available on PATH (the manifest mentions ffmpeg but ffprobe is used for metadata), and avoid using this on sensitive or confidential videos. If you want extra caution, (1) inspect the full script for any additional endpoints or code paths, (2) run it in an isolated environment or VM, and (3) monitor network traffic during a test run to verify it only contacts the documented https://filmora-cloud-api-alisz.wondershare.cc endpoints and the task result download URL.Like a lobster shell, security has layers — review code before you run it.
latestvk976dwmxvgf7tcdg0g0bawbpdd84hp67
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎞️ Clawdis
Binsffmpeg
Install
Install ffmpeg
Bins: ffmpeg
brew install ffmpeg