Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AutoClip Pro

v1.0.1

视频批量处理技能包 - 一键处理100个视频,自动剪辑、加字幕、配乐、调风格。适合自媒体从业者、短视频创作者。

0· 467·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name, description, SKILL.md, and code files are coherent: this is a local batch video processing tool that uses Node.js + FFmpeg. However the registry metadata declares no required binaries while the README/SKILL.md and package.json explicitly require Node.js and FFmpeg. That mismatch is an incoherence (the skill will not run as advertised unless those binaries are installed).
Instruction Scope
SKILL.md instructs the agent/user to run local Node scripts and to install FFmpeg — that matches the contained scripts. The runtime instructions do not ask for remote endpoints, credentials, or reading unrelated system files. They do instruct scanning an input folder and writing outputs locally, which is expected for the stated purpose.
Install Mechanism
There is no remote install/download step in the registry metadata — this is an instruction-and-code bundle. All code is included in the package, so nothing is fetched from arbitrary URLs during install. This minimizes supply-chain risk from the skill manifest itself.
Credentials
The skill requests no environment variables or secrets and does not reference external credentials. That is proportionate for a local video processing tool.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges or modify other skills. It runs only when invoked, which is appropriate.
What to consider before installing
This package appears to be a local batch video editor and includes the Node scripts you would expect. Before installing or running: 1) Note the manifest omission — you must install Node.js (>=18) and FFmpeg separately; SKILL.md and package.json expect them. 2) Inspect the included scripts yourself (already present) — they spawn shell ffmpeg/ffprobe commands. Because commands are constructed from file paths and run via the shell, malformed or malicious filenames could cause command injection; avoid running on untrusted files or use an isolated VM/container. 3) Ensure the ffmpeg/ffprobe binaries on your PATH are from a trusted source (download official builds) to avoid running trojaned binaries. 4) If you plan to run this in production, consider sanitizing filenames and running in a restricted environment, and test with sample data first. If you want higher assurance, ask the author for a signed release or a repository with commit history and an explicit list of runtime requirements.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c8d5evcbh8hgpqc65rehwkh8296b1
467downloads
0stars
2versions
Updated 23h ago
v1.0.1
MIT-0

视频批量处理技能包 AutoClip Pro

一句话介绍

一键处理100个视频,自动剪辑、加字幕、配乐、调风格。

解决什么问题?

  • 剪辑耗时:一个视频要搞半小时 → 10分钟搞定100个
  • 重复劳动:每次都要手动加字幕、配乐 → 配置一次,自动搞定
  • 请人太贵:剪辑师月费3000+ → 工具一次性¥99

功能清单

  • 📦 批量处理:自动扫描文件夹,批量处理所有视频
  • ✂️ 视频剪辑:精确剪切、多段拼接
  • 📝 字幕添加:支持SRT字幕,自定义样式
  • 🎵 背景音乐:随机选择、音量调节
  • 🎨 画面风格:知识科普/情感故事/搞笑段子
  • 💧 水印功能:四角定位、自动添加
  • 📐 分辨率调整:720P/1080P/4K

快速开始

安装

# 1. 确保已安装 Node.js 和 FFmpeg
# 2. 进入技能包目录
cd video-batch-skill
npm install

使用

# 把视频放到 raw-videos 文件夹
# 运行处理
node scripts/batch-process.js

配置示例

{
  "style": "knowledge",
  "resolution": "1920x1080",
  "audioVolume": 0.3
}

文件结构

video-batch-skill/
├── README.md          # 产品说明
├── TUTORIAL.md        # 傻瓜式教程
├── install.bat        # 一键安装
├── run.bat            # 一键运行
├── config.json        # 配置示例
├── scripts/           # 核心代码
├── templates/         # 风格模板
└── examples/          # 示例文件

适用人群

  • 短视频矩阵运营者
  • 自媒体从业者
  • 代运营公司
  • 电商带货主播
  • 知识付费博主

价格

  • 基础版:¥99
  • 进阶版:¥199(含模板库+素材包)
  • 专业版:¥299(含1对1指导)

开发者:AI-Company 联系:通过ClawHub

Comments

Loading comments...