Security checks across malware telemetry and agentic risk
This looks like a real video-processing skill, but it needs review because it can change the local Python environment, send video-derived data or filenames externally, and modify original files.
Install only after reviewing the scripts and running them in an isolated environment. Avoid confidential videos unless you are comfortable sending transcripts to the selected LLM provider, verify or unset OPENCLAW_TARGET before processing sensitive filenames, and back up originals because the clipping script renames source files.
cmd = ["ffmpeg", "-i", video_path, "-vf", f"subtitles='{subtitle_path}'", "-c:a", "copy", "-y", output_path]
process = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True)
for line in process.stderr:
print(line, end='')if result.returncode != 0:
print("📦 正在安装 auto-editor...")
try:
subprocess.run([sys.executable, "-m", "pip", "install", "auto-editor", "--break-system-packages"],
capture_output=True)
print(" ✅ auto-editor 安装完成")
except Exception as e:except ImportError:
print(f" 📦 正在安装 {dep}...")
try:
subprocess.run([sys.executable, "-m", "pip", "install", dep, "--break-system-packages"],
capture_output=True)
print(f" ✅ {dep} 安装完成")
except Exception as e:66/66 vendors flagged this skill as clean.