Video Compressor
Analysis
This skill appears benign and mainly guides users to a third-party video compressor, with the main thing to notice being that users may upload videos to VideoAny.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
permissions: - shell:exec
The skill requests shell execution, but the documented command is a local Python helper and the provided source only prints VideoAny guidance.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
actual generation is done on VideoAny web
The compression workflow is performed by an external web service, so videos selected by the user may be uploaded outside the local environment.
