media-info
v1.0.0Analyze media files with MediaInfo CLI and compare behavior with ffprobe. Use when inspecting container/codec metadata, extracting width/height/duration/bitr...
⭐ 0· 169·1 current·1 all-time
byKarl Zhu@karlzhu-zxc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided artifacts: the SKILL.md explains installing and running MediaInfo CLI and comparing with ffprobe. The included install and test scripts are directly relevant to obtaining and verifying the mediainfo binary.
Instruction Scope
SKILL.md limits actions to running the provided install and test scripts and invoking the built mediainfo binary on user-supplied files. The install script downloads, extracts, and compiles source into vendor/mediainfo and the test script creates a short WAV file and runs mediainfo. Instructions do not read unrelated files or request other system credentials. Note: the install script relies on network access and local build tooling (compilers/make) which are not declared but are reasonable for building from source.
Install Mechanism
No platform install spec is declared (instruction-only), but the included install script downloads a tar.bz2 from https://mediaarea.net and extracts and builds it locally. Using the project's official domain is expected, but the archive is neither checksum-verified nor signature-checked, so integrity depends on HTTPS and the network path. The script permits overriding MEDIAINFO_URL (which could point elsewhere if set by an operator).
Credentials
The skill requests no credentials or sensitive environment variables. It does accept optional MEDIAINFO_VERSION and MEDIAINFO_URL environment overrides which are reasonable for version control but could be used to point to alternate downloads if misconfigured.
Persistence & Privilege
always is false and the skill does not request elevated or persistent system privileges. It writes the built binary into the skill's vendor directory only and does not modify other skills or system-wide settings.
Assessment
This skill appears coherent and focused on installing and using MediaInfo. Before installing: (1) be aware the installer downloads and builds source from the network and requires local build tools (gcc/make/etc.); (2) consider running the install in a sandbox or CI runner rather than on a sensitive host; (3) if you require stronger integrity guarantees, download a verified release (or check checksums/signatures) instead of relying solely on HTTPS; (4) avoid setting MEDIAINFO_URL to untrusted locations. No credentials are requested by the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97b94axq36291v7gawt9nzz1183arj3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.