video-production-pipeline

AdvisoryAudited by Static analysis on May 7, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If connected to real agents, scripts, URLs, media assets, and project metadata could be shared between multiple components.

Why it was flagged

The skill is designed around passing work between multiple specialized agents. This is coherent with the video-production purpose, but real deployments should define which agents receive which user content and assets.

Skill content
interface AgentOrchestration { mode: 'sequential' | 'parallel' | 'hybrid'; agents: AgentConfig[]; handoffs: HandoffRule[]; errorHandling: ErrorStrategy; }
Recommendation

Use only trusted agents, limit what each agent receives, and require review before sharing sensitive project materials outside the main workflow.

What this means

If later connected to social or video platform accounts, an accidental publish or schedule action could make content public.

Why it was flagged

The workflow contemplates public publishing or scheduling at final review. It is framed as a human approval option and no platform credentials or auto-publish code are shown, so this is a notice rather than a concern.

Skill content
options: ['publish', 'schedule', 'hold-for-review']
Recommendation

Keep publish and schedule actions behind explicit user confirmation and use narrowly scoped platform permissions.

What this means

Generated scripts, media, logs, or project history may persist if an implementation follows these recommendations.

Why it was flagged

The skill recommends retaining project assets and history. This is normal for video production, but the artifacts do not define storage paths, retention, or cleanup behavior.

Skill content
Cache reusable assets ... Maintain consistency logs ... Track version history
Recommendation

Confirm where assets and logs are stored, how long they are kept, and how to delete them when a project is finished.