Openclaw Thumbnail Forge

PassAudited by ClawScan on May 9, 2026.

Overview

This appears to be a local video-thumbnail utility with behavior that matches its description, though users should install dependencies carefully and run it only on files they choose.

Before installing, make sure ffmpeg, ffprobe, python3, and Pillow come from trusted sources. Run the scripts only on videos/images you choose and direct outputs to a dedicated folder. The provided artifacts do not show remote calls, credential use, or background persistence.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing an unpinned package can pull the latest available version, which may differ across systems.

Why it was flagged

The skill depends on the Pillow Python package but does not pin a version in the setup instruction. This is a normal dependency for local image processing, but users should install it from a trusted package source.

Skill content
pip install Pillow
Recommendation

Install Pillow in a virtual environment from the official package index or pin a known-good version if reproducibility matters.

What this means

The tool will process local media files and create output images/reports in the paths the user provides.

Why it was flagged

The script invokes ffmpeg on user-supplied video paths and writes generated frames. This is central to the skill's purpose and uses argument lists rather than shell execution, but it still relies on local multimedia tooling.

Skill content
subprocess.run(["ffmpeg", "-hide_banner", "-y", "-ss", f"{timestamp}", "-i", str(src), "-frames:v", "1", "-q:v", "2", str(out_path)], ...)
Recommendation

Use trusted media files where possible, keep ffmpeg/Pillow updated, and choose output directories intentionally.