Rdk X5 Media
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: rdk-x5-media Version: 1.0.0 The skill bundle provides legitimate instructions and commands for media processing (audio, video, RTSP, and display configuration) on the Horizon Robotics RDK X5 platform. It utilizes standard system tools like srpi-config, aplay, and ROS2 launch files without any signs of malicious intent, data exfiltration, or obfuscation.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running these commands can change the device’s multimedia and display configuration.
The skill instructs users to run privileged or system-configuration commands that change audio, display, LCD, or interface settings.
sudo srpi-config ... xrandr --output HDMI-1 --mode 1920x1080
Run the configuration steps only when you intend to change the RDK X5 device settings, and verify the selected audio, display, and interface options before applying them.
Camera credentials could be visible to local users or saved in command history if entered directly on the command line.
The RTSP example includes a username and password in the stream URL, which is expected for some cameras but can expose credentials if copied directly into shell history, logs, or process listings.
rtsp_url:="rtsp://admin:password@192.168.1.64:554/stream1"
Use a limited camera account where possible, avoid reusing real passwords in examples or shared logs, and consider safer credential handling if the RTSP client supports it.
If VNC remains enabled or is exposed to an untrusted network, others may be able to attempt remote desktop access.
The skill directs users to enable VNC remote desktop, which is purpose-aligned but may create a persistent remote access service on the device.
sudo srpi-config # → Interface Options → VNC → Enable
Enable VNC only when needed, set strong authentication, restrict network exposure, and disable the service when remote desktop access is no longer required.