Wjs Syncing Multicam
PassAudited by ClawScan on May 13, 2026.
Overview
This appears to be a local video/audio synchronization helper with no evidence of credential use or network exfiltration, but users should note its undeclared media-tool dependencies and a documentation inconsistency about whether extra synced video files may be created.
Before installing, understand that this skill runs local ffmpeg/ffprobe processing on your selected media and writes sidecar files next to the originals. Verify the required tools and Python packages yourself, and check whether sync.py may still create any `_synced.MOV` outputs despite the sidecar-only design goal.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may fail or rely on whatever ffmpeg, ffprobe, numpy, and scipy versions are already present on the machine.
The package has limited provenance and no declared dependency contract, even though the supplied scripts rely on external local media tools and scientific Python libraries.
Source: unknown; Homepage: none ... No install spec — this is an instruction-only skill ... Required binaries (all must exist): none
Install or verify these dependencies from trusted sources before use, and consider adding explicit requirements metadata.
The skill will process the media files you point it at using local command-line tools.
The skill invokes local ffmpeg/ffprobe subprocesses to extract audio and inspect media duration. This is expected for the stated media-sync purpose and uses argument lists rather than shell strings.
cmd = ["ffmpeg", "-nostdin", "-y", "-i", str(video_path), ...]; subprocess.run(cmd, check=True, stderr=subprocess.DEVNULL)
Use up-to-date trusted media tools and run the scripts only on files you intend to process.
A user expecting only small JSON sidecars could be surprised by extra large video outputs if that deprecated path is active.
The documentation gives conflicting expectations about whether only lightweight sidecars are produced or whether additional re-encoded video files may still be emitted.
Outputs only a lightweight `.sync.json` sidecar ... Originals are never modified, copied, or re-encoded ... `scripts/sync.py` ... still emits `_synced.MOV` files alongside the sidecar
Confirm the actual sync.py output behavior before running on large projects, and update the documentation or script so the sidecar-only guarantee is unambiguous.