autoshorts

• Analyzed: May 9, 2026, 8:26 PM
• Findings: 1
• Version: 2.0.3
• Hash: 172670bd10b581409682896b8f86044f370750b824a870b661393c689d969c5e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'autoshorts' skill is a legitimate video processing pipeline designed to automate the creation of short-form clips using Whisper for transcription, Google Gemini for multimodal analysis, and FFmpeg for editing. The code in autoshorts.py follows standard practices, using safe subprocess calls for video manipulation and the official google-genai SDK for AI analysis. Network activity is limited to the stated services (Google and api.upload-post.com), and the instructions in SKILL.md emphasize human-in-the-loop approvals and explicit warnings regarding API key security. No evidence of data exfiltration, obfuscation, or unauthorized persistence was found.