Movie

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only filmmaking skill is coherent and benign, with user-directed media commands and project logs that users should review for paths and sensitive creative assets.

This skill appears safe to install as an instruction-only filmmaking guide. Before using it, decide where movie project files should be stored, review any media-processing commands before execution, and be mindful that prompts, scripts, reference images, and generated clips may persist in the project folder.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

If used, the agent may process local video, audio, subtitle, or image files and create new output files.

Why it was flagged

The skill documents local media-processing commands. These are expected for video editing and are shown as examples, but they can read and write local media files if the user or agent runs them.

Skill content

```bash
ffmpeg -f concat -safe 0 -i list.txt -c copy output.mp4

# Extract frame for reference
ffmpeg -i clip.mp4 -ss 00:00:02 -vframes 1 ref.jpg
```

Recommendation

Review commands and file paths before running them, keep work inside the intended project folder, and avoid using untrusted media lists or filenames.

Note

ASI06: Memory and Context Poisoning

What this means

Scripts, prompts, references, and production notes may remain on disk and be reused during later editing or generation steps.

Why it was flagged

The workflow relies on persistent project files containing scripts, prompts, character references, generated clips, and status notes. This is purpose-aligned, but those files may contain sensitive creative or client material and may influence later work.

Skill content

Project Structure
```
~/movies/<project>/
├── script.md
├── style-bible.md
├── characters/
├── shots/
├── timeline.md
└── status.md
```
...
2. **Log everything** — Every prompt, every iteration, what worked/failed

Recommendation

Store projects in a private location, avoid putting secrets or confidential client information in prompts/logs unless appropriate, and review project notes before reusing them.