Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Video Editing
v1.0.0Edit videos with AI background removal, color grading, upscaling, stabilization, and enhancement tools.
⭐ 4· 3.3k·21 current·25 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (AI video editing with background removal, color grading, upscaling, stabilization, enhancement) matches the SKILL.md and the technique files. Recommended tools and workflows (ffmpeg, DaVinci, Runway, Topaz, Real-ESRGAN, rembg, etc.) are appropriate and expected for this domain.
Instruction Scope
The runtime instructions tell the agent to use cloud APIs and local tools, to upload videos to named services (Runway, Unscreen, Topaz, Replicate, etc.), and to run shell commands (ffmpeg, pip install, CLI tools). This is within the skill's purpose, but it means user media may be sent to external providers and the agent may execute local commands — users should expect those behaviours.
Install Mechanism
There is no install spec and no code files — lowest-risk format. The files include example install commands (pip, apt, brew) for optional/third-party tools, which is normal for an instructions-only skill and does not itself write or fetch code during skill installation.
Credentials
No required environment variables are declared in registry metadata, but multiple example snippets reference an API_KEY/Authorization header for third-party services. This is not necessarily malicious (examples assume the user supplies credentials to cloud services), but it's a mismatch: the skill won't automatically have keys and will require the user to provide credentials when using cloud APIs.
Persistence & Privilege
The skill does not request persistent privileges (always:false), doesn't modify other skills or system-wide configs, and has no install-time persistence. It can be invoked by the agent (normal), but that is expected for skills.
Assessment
This skill is a collection of editing workflows and command/API examples — it appears coherent for video editing. Before installing or using it, consider: (1) Many examples upload media to third-party services (Runway, Unscreen, Topaz, Replicate, etc.) — don't send sensitive or private videos unless you trust the service and understand its privacy/retention policy. (2) Several examples reference API_KEY placeholders but the registry doesn't provide/store credentials — you'll need to provide keys yourself if you want cloud integrations. (3) The guidance contains shell commands that can install/run tools (pip, apt, brew, vendor CLIs); only run those you trust and verify they come from official sources. (4) Some techniques (face swap) have ethical/legal implications; use responsibly. If you want stronger guarantees, ask the skill author for explicit documentation on which external endpoints are used and for a minimal list of required credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk976rr2kyxz7b1pk581f99wsz58100v5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎞️ Clawdis
OSLinux · macOS · Windows