Find Reference Video via Frameset

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill appears to do what it says: search Frameset for reference videos, show results for user selection, and optionally download selected videos locally.

This looks safe to install if you expect a Frameset video-search helper. Be aware that the download feature depends on yt-dlp even though it is not declared in the metadata, and confirm each download before running it.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The download feature may fail if yt-dlp is not installed, or it may use whatever yt-dlp binary is already present on the user's PATH.

Why it was flagged

The skill later documents a yt-dlp download command, so the required local tool is not declared in the registry metadata.

Skill content
Required binaries (all must exist): none
Recommendation

Before using the download step, verify that yt-dlp is installed from a trusted source; the skill publisher should declare it as a required binary.

What this means

Using the download function will run yt-dlp locally and create video files on the user's machine.

Why it was flagged

The skill instructs the agent to run a local command-line downloader. This is disclosed and aligned with the stated video-download purpose.

Skill content
yt-dlp -f "best[ext=mp4]/best" -o "视频名.%(ext)s" "视频链接"
Recommendation

Only approve downloads for videos you selected, confirm the destination and filename, and use a trusted yt-dlp installation.