Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Video Processor

v1.1.0

视频处理工具 - 格式转换、压缩、剪辑、字幕

0· 74·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kaising-openclaw1/xiaoming-video-processor.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Video Processor" (kaising-openclaw1/xiaoming-video-processor) from ClawHub.
Skill page: https://clawhub.ai/kaising-openclaw1/xiaoming-video-processor
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install xiaoming-video-processor

ClawHub CLI

Package manager switcher

npx clawhub@latest install xiaoming-video-processor
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The described purpose (conversion, compression, clipping, subtitles) is plausible, but the package metadata and docs conflict: registry metadata lists no required binaries or credentials, while _meta.json declares external binaries (ffmpeg, curl). SKILL.md calls a 'clawhub' CLI with no code or install spec provided. It's unclear whether work is done locally (needs ffmpeg) or remotely (would need network/endpoints and likely credentials).
!
Instruction Scope
Runtime instructions only show example 'clawhub video ...' commands and don't explain where processing runs, whether files are uploaded, or whether credentials are needed. The instructions don't reference extraneous system files, but they are vague and grant the agent broad discretion (no explicit safety/consent rules about uploading user files).
Install Mechanism
There is no install spec (instruction-only), which is low risk, but README suggests installing via 'npx clawhub@latest install video-processor' and _meta.json lists required binaries—this mismatch is concerning because an implicit install could pull code or require system binaries (ffmpeg) without being declared in registry metadata.
Credentials
The skill declares no required environment variables or credentials, but pricing and the ambiguous 'clawhub' CLI suggest there may be an external service or subscription not documented here. The absence of declared auth requirements is disproportionate to a potentially cloud-backed paid service.
Persistence & Privilege
The skill does not request always: true and does not declare special privileges. Model invocation is allowed (default) which is normal. No evidence it attempts to change other skills or system-wide settings.
What to consider before installing
This skill's functionality (video convert/compress/edit) is reasonable, but the package is inconsistent and incomplete: _meta.json lists ffmpeg and curl while registry metadata lists none, SKILL.md calls an unspecified 'clawhub' CLI, and there's no explanation of whether your files are processed locally or uploaded to a remote service (and whether credentials or payments are required). Before installing or using it, ask the publisher for: (1) the source repository or published package URL; (2) exact install steps and whether anything will be downloaded or executed; (3) whether files are uploaded to a remote server and the destination endpoint/privacy policy; (4) any required credentials or payment flow; and (5) confirmation of required system binaries (e.g., ffmpeg). If you can't get clear answers, avoid running it on sensitive or large files and test first with non-sensitive sample files in a controlled environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk976j9nm1wgqxvm6kqs190dhh5850jsh
74downloads
0stars
2versions
Updated 1w ago
v1.1.0
MIT-0

Video Processor

视频处理工具集,支持转换、压缩、剪辑。

功能

  • ✅ 格式转换 (MP4/MOV/AVI 等)
  • ✅ 视频压缩
  • ✅ 简单剪辑
  • ✅ 字幕添加
  • ✅ 封面提取

使用

# 格式转换
clawhub video convert --input video.mov --output video.mp4

# 压缩
clawhub video compress --input video.mp4 --quality 70

# 添加字幕
clawhub video subtitle --input video.mp4 --subtitle sub.srt

定价

版本价格功能
免费版¥0100MB/月
Pro 版¥895GB/月
订阅版¥25/月20GB/月

Comments

Loading comments...