Video
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: video Version: 1.0.1 The OpenClaw AgentSkills bundle for video processing is benign. It provides comprehensive documentation and examples for using standard video tools like `ffmpeg` and `ffprobe` for various tasks. The `SKILL.md` explicitly states that the skill 'Does NOT access files without user instruction' and 'Does NOT upload to external services automatically,' indicating an intent for safe operation. All example commands are related to legitimate video manipulation and show no evidence of data exfiltration, malicious execution, persistence, or obfuscation. While the underlying `ffmpeg` commands could be misused if the agent's input sanitization is flawed, this represents a potential vulnerability in the agent's execution environment rather than malicious intent within the skill bundle itself.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run local video-processing commands that read input media and write output files.
The skill is designed to run local FFmpeg commands that create transformed media files. This is expected for the stated purpose, but users should still review commands and paths before execution.
Runs FFmpeg commands on user request
Use explicit input and output filenames, keep backups of originals, and review batch commands before allowing them to run.
If run in the wrong directory, a batch workflow could create many outputs or consume significant disk and CPU resources.
The documented batch workflow can process every matching video in a directory. This is purpose-aligned, but folder-wide operations should be user-directed and scoped.
for f in *.mp4; do ffmpeg -i "$f" -vf "lut3d=my_look.cube" -c:a copy "graded_$f" done
Run batch examples only in the intended folder and confirm the file pattern before execution.
Using optional captioning or upscaling features may require separately installed software.
The skill references optional third-party local tools but does not install them or specify sources. This is not suspicious for an instruction-only skill, but users should install optional tools from trusted sources.
Optional: - `whisper` — local transcription for captions - `realesrgan` — AI upscaling
Install optional tools only from official or trusted package sources and verify they are the expected binaries.