ClawHub
Back to skill

Security audit

media-processor

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed media-processing tool whose main risks are normal remote-media handling and dependency hygiene, not hidden or purpose-mismatched behavior.

Install it only where downloading and processing media is acceptable. Prefer a virtual environment or container, keep FFmpeg and Python packages updated, avoid private/internal or untrusted URLs, and choose output paths deliberately to avoid overwriting important files.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The README explicitly promotes downloading and processing remote HTTP/HTTPS and m3u8 media, but it does not clearly warn users that the skill performs outbound network access and stores fetched content in temporary local files. In an agent context, this can lead to unexpected external requests, handling of untrusted media, and local persistence of potentially sensitive or malicious content without informed user consent.

Unpinned Dependencies

Low
Category
Supply Chain
Content
Pillow>=10.0.0
ffmpeg-python>=0.2.0
static-ffmpeg>=2.5.0
Confidence
97% confidence
Finding
`Pillow>=10.0.0` is unpinned, so installs may resolve to different future versions over time. This creates supply-chain and reliability risk because a later release could introduce breaking changes or a newly published compromised/vulnerable version, which matters more here since the skill processes untrusted media inputs.

Unpinned Dependencies

Low
Category
Supply Chain
Content
Pillow>=10.0.0
ffmpeg-python>=0.2.0
static-ffmpeg>=2.5.0
Confidence
97% confidence
Finding
`ffmpeg-python>=0.2.0` is unpinned, allowing non-deterministic dependency resolution and future unintended upgrades. In a media-processing skill, that increases operational and supply-chain risk because parsing/transcoding components often handle attacker-controlled files and streams.

Unpinned Dependencies

Low
Category
Supply Chain
Content
Pillow>=10.0.0
ffmpeg-python>=0.2.0
static-ffmpeg>=2.5.0
Confidence
97% confidence
Finding
`static-ffmpeg>=2.5.0` is unpinned, so builds may pull different bundled FFmpeg binaries over time. That is risky in this context because the tool handles remote URLs, m3u8, mp4, and other media inputs, making parser security and binary provenance especially important.

Known Vulnerable Dependency: Pillow — 10 advisory(ies): CVE-2016-2533 (Pillow buffer overflow in ImagingPcdDecode); CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2021-27922 (Pillow Uncontrolled Resource Consumption) +7 more

Critical
Category
Supply Chain
Confidence
89% confidence
Finding
The requirement references `Pillow` without constraining it to a version known to be free of listed advisories, and the static finding reports multiple historical vulnerabilities including possible code execution and resource-consumption issues. Because this skill explicitly processes images and possibly attacker-supplied remote media, any vulnerable image library materially increases the chance of exploitation through crafted files.

Static analysis

No suspicious patterns detected.