free-mp4-pptzc

• Analyzed: May 4, 2026, 1:26 PM
• Findings: 1
• Version: 1.0.0
• Hash: 43eb66c8d3ec64c0c59ca29aa48ac942af1cf717b3da812f1f208dc6098c3676
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides legitimate video generation functionality but exhibits several high-risk behaviors. It uses subprocesses to execute dynamically generated JavaScript via Node.js (scripts/html_to_images.py) and contains hardcoded absolute paths to an 'Administrator' user's directory to locate FFmpeg (scripts/make_video.py). Furthermore, it includes functions to automatically install Python packages and browser binaries (scripts/make_video_html.py), which modifies the host environment. While these actions are technically necessary for HTML-to-video rendering, the combination of dynamic code execution, environment modification, and highly specific hardcoded paths is characteristic of tools designed for specific, potentially unauthorized environments.