ClawHub

Live Photo Maker

v1.0.2

Convert a local video into an iPhone-compatible Live Photo package (.pvt) for Apple Photos, lock-screen wallpaper use, or Live Photo sharing. Use when the us...

⭐ 0· 80·0 current·0 all-time
byHe Kai@hekaiii
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description match the implementation: the script uses ffmpeg to transcode and extract a frame, makelive to build a .pvt package, and ditto to create a ZIP. However, the skill metadata declared no required binaries while the script requires ffmpeg, makelive, and ditto (the latter is macOS-specific). This mismatch should be corrected so users know what must be present.
✓
Instruction Scope
SKILL.md instructs the agent to operate only on a local video, generate an optimized MP4 and JPG cover, run makelive, and ZIP the package for transfer. It does not direct reading unrelated files, accessing environment variables, or sending data to external endpoints.
✓
Install Mechanism
There is no install spec (instruction-only) and the included shell script is small and local. SKILL.md suggests installing ffmpeg, makelive, and pipx but does not pull code from arbitrary URLs or run downloads; risk from install mechanism is low.
✓
Credentials
The skill requests no credentials or environment variables and the runtime script does not read any secret-bearing env vars or config paths.
✓
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system-wide agent settings. It runs only when invoked and does not request elevated or persistent privileges.
Assessment
This skill appears to do what it says: convert a local video into a .pvt Live Photo package. Before installing/using it, ensure you run it locally and have the needed host tools installed: ffmpeg (for transcoding/frame extraction), makelive (to create the .pvt), and ditto (macOS-only tool used to zip the package). Note the package is macOS-oriented — ditto and importing into Photos assume macOS. The skill metadata currently omits the required binaries and OS guidance; treat that as an informational mismatch. If you are concerned about supply-chain risk, inspect or obtain makelive from a trusted source (pipx/pypi or the project's repo) before installing. Also confirm output paths to avoid accidental overwrites of important files.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fm0chrwpxv556vypfgvjj7d83h1b6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments