Pinterest Video Download

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill is coherent for downloading a user-requested Pinterest video, with minor notes about its reliance on ffmpeg and local file writing.

Before installing, make sure you are comfortable with the skill using ffmpeg to download a Pinterest video and save an MP4 locally. Use a trusted ffmpeg installation and keep downloaded files in the intended workspace folder.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

The user may need ffmpeg installed locally, and any installation source should be trusted.

Why it was flagged

The skill discloses an ffmpeg dependency and possible dependency installation, while the provided install metadata has no install spec or required binary declaration.

Skill content
Use `ffmpeg`; install missing dependencies yourself when safe.
Recommendation

Install ffmpeg through a trusted package manager or ask for confirmation before changing the local environment.

#
ASI05: Unexpected Code Execution
Low
What this means

Running the skill can download remote media and overwrite the selected output MP4 if it already exists.

Why it was flagged

The helper executes the local ffmpeg binary to fetch the supplied HLS URL and write the output file, using -y to overwrite the target path.

Skill content
cmd = ["ffmpeg", "-y", "-i", m3u8_url, "-c", "copy", str(output)]
Recommendation

Keep outputs in the intended workspace downloads folder and confirm before reusing an existing filename.