Video Frames

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill coherently uses ffmpeg to extract video frames and does not show hidden data access, networking, credentials, or suspicious behavior.

This appears safe for its stated purpose. Before installing or using it, confirm you have a trusted ffmpeg installation and provide an output path you are comfortable creating or overwriting.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

If the user or agent supplies an existing output path, that file may be overwritten.

Why it was flagged

The script intentionally invokes ffmpeg and uses -y, which overwrites the requested output file without prompting. This is purpose-aligned for frame extraction, but it affects local files.

Skill content
ffmpeg -hide_banner -loglevel error -y ... "$out"
Recommendation

Use a deliberate output path, preferably in a temporary or project-specific directory, and avoid pointing --out at important existing files.