Rdk X5 Media

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent RDK X5 multimedia instruction skill, but users should review the steps that use sudo, camera credentials, and VNC remote desktop.

Install/use this skill if you want RDK X5 multimedia setup guidance. Before running commands, confirm they match your hardware, avoid exposing real RTSP passwords, and secure or disable VNC when not actively needed.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running these commands can change the device’s multimedia and display configuration.

Why it was flagged

The skill instructs users to run privileged or system-configuration commands that change audio, display, LCD, or interface settings.

Skill content
sudo srpi-config ... xrandr --output HDMI-1 --mode 1920x1080
Recommendation

Run the configuration steps only when you intend to change the RDK X5 device settings, and verify the selected audio, display, and interface options before applying them.

What this means

Camera credentials could be visible to local users or saved in command history if entered directly on the command line.

Why it was flagged

The RTSP example includes a username and password in the stream URL, which is expected for some cameras but can expose credentials if copied directly into shell history, logs, or process listings.

Skill content
rtsp_url:="rtsp://admin:password@192.168.1.64:554/stream1"
Recommendation

Use a limited camera account where possible, avoid reusing real passwords in examples or shared logs, and consider safer credential handling if the RTSP client supports it.

What this means

If VNC remains enabled or is exposed to an untrusted network, others may be able to attempt remote desktop access.

Why it was flagged

The skill directs users to enable VNC remote desktop, which is purpose-aligned but may create a persistent remote access service on the device.

Skill content
sudo srpi-config # → Interface Options → VNC → Enable
Recommendation

Enable VNC only when needed, set strong authentication, restrict network exposure, and disable the service when remote desktop access is no longer required.