Openclaw Thumbnail Forge
PassAudited by ClawScan on May 9, 2026.
Overview
This appears to be a local video-thumbnail utility with behavior that matches its description, though users should install dependencies carefully and run it only on files they choose.
Before installing, make sure ffmpeg, ffprobe, python3, and Pillow come from trusted sources. Run the scripts only on videos/images you choose and direct outputs to a dedicated folder. The provided artifacts do not show remote calls, credential use, or background persistence.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing an unpinned package can pull the latest available version, which may differ across systems.
The skill depends on the Pillow Python package but does not pin a version in the setup instruction. This is a normal dependency for local image processing, but users should install it from a trusted package source.
pip install Pillow
Install Pillow in a virtual environment from the official package index or pin a known-good version if reproducibility matters.
The tool will process local media files and create output images/reports in the paths the user provides.
The script invokes ffmpeg on user-supplied video paths and writes generated frames. This is central to the skill's purpose and uses argument lists rather than shell execution, but it still relies on local multimedia tooling.
subprocess.run(["ffmpeg", "-hide_banner", "-y", "-ss", f"{timestamp}", "-i", str(src), "-frames:v", "1", "-q:v", "2", str(out_path)], ...)Use trusted media files where possible, keep ffmpeg/Pillow updated, and choose output directories intentionally.
