Natural Language Video Search

PassAudited by VirusTotal on May 10, 2026.

Overview

Type: OpenClaw Skill Name: natural-language-video-search Version: 0.2.3 The skill bundle provides instructions and metadata for an AI agent to interface with a CLI tool ('sentrysearch') for semantic video indexing and search using Gemini embeddings. The setup involves standard procedures such as cloning a GitHub repository (https://github.com/ssrajadh/sentrysearch) and using 'uv' for dependency management. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the instructions include helpful safety warnings regarding API costs and user confirmation for large tasks.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill requires trusting code and dependencies that were not part of this artifact review.

Why it was flagged

The submitted skill is instruction-only and tells the user to fetch and install code from an external GitHub repository; the runnable code and dependency lock context are not included in the provided artifacts.

Skill content
git clone https://github.com/ssrajadh/sentrysearch.git
cd sentrysearch
uv sync
Recommendation

Review the GitHub repository and dependency files before installing, and prefer pinned versions or a trusted release tag when possible.

What this means

A local project file may contain the user’s Gemini API key, which could be exposed if the directory is shared, backed up, or committed accidentally.

Why it was flagged

The skill requires a Gemini API key and documents that initialization stores it locally in a .env file, which is expected for this integration but is still credential handling.

Skill content
This prompts for your key, writes it to `.env`, and validates it with a test embedding. You can also set `GEMINI_API_KEY` directly as an environment variable.
Recommendation

Use a dedicated Gemini key with appropriate limits, keep .env private, and avoid committing or sharing the installation directory.

What this means

Private dashcam, security, surveillance, or Tesla footage may be processed by an external provider and represented in a persistent local search index.

Why it was flagged

The skill sends video chunks to Gemini for embedding and persists searchable vectors locally. This is central to the purpose, but video footage and derived embeddings can be sensitive.

Skill content
Video files are split into overlapping chunks... Each chunk is embedded as raw video using Gemini Embedding 2... Vectors are stored in a local ChromaDB database.
Recommendation

Index only footage you are comfortable sending to Gemini for embedding, avoid broad private folders unless intended, and understand where the local ChromaDB index is stored and how to delete it.