Boxed FFmpeg

• Analyzed: Apr 3, 2026, 6:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: 2b081df684b37c973738efd3d347d48ad9131c3a3b738e498438afc1890942e8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides media processing capabilities by instructing the agent to download a remote WASM binary from a personal GitHub repository (guyoung/wasm-sandbox-openclaw-skills) and execute it using a sandbox tool. While this behavior is consistent with the stated goal of providing a 'boxed' FFmpeg environment, the automated downloading and execution of remote payloads (SKILL.md) is a high-risk capability. No clear evidence of malicious intent, such as data exfiltration or unauthorized access, was found, but the reliance on an unverified external binary warrants a suspicious classification.