URL to Video Generator

• Analyzed: May 12, 2026, 4:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: c9d0dd6a77642cdedafd478bc1c44f286af1e051066e7a4444e1228e1c5a8df9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a functional workflow for generating promotional videos from websites using Remotion and React. It requires high-risk capabilities, including network access for scraping, shell execution for project setup and rendering, and file system modifications, which are plausibly needed for its stated purpose. However, the workflow contains potential vulnerabilities, such as shell injection risks in the SKILL.md instructions (e.g., piping curl output to grep with user-provided URLs) and lack of input sanitization in scripts/init-project.sh. No evidence of intentional malice, data exfiltration, or persistence was found.