Reel to Skill

• Analyzed: May 16, 2026, 6:51 PM
• Findings: 1
• Version: 1.0.0
• Hash: f1835f7d681704b282f0330069eded2cdec0e97505a6ca367d06699b1b8ebe80
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to automate the conversion of social media videos into OpenClaw skills by downloading content via `yt-dlp` and transcribing audio using the OpenAI API. The script `scripts/download_transcribe.py` uses safe subprocess calls (passing arguments as a list rather than a shell string) and correctly handles the `OPENAI_API_KEY` by sending it only to the official OpenAI transcription endpoint. No evidence of malicious intent, data exfiltration, or command injection vulnerabilities was found.