Xeon Smartupscale

PassAudited by ClawScan on May 12, 2026.

Overview

This is a local video upscaling skill, with the main caution that its installer downloads third-party packages and ffmpeg from the internet.

Before installing, be comfortable with the external dependency downloads used by install.sh. Use explicit input and output paths, avoid pointing output at an important existing file, and expect CPU-heavy local processing for long or high-resolution videos.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may run third-party code from PyPI, PyPA, and a static ffmpeg provider on the local machine.

Why it was flagged

The installer may execute downloaded pip bootstrap code, install some unpinned Python dependencies, and download a static ffmpeg archive without an artifact-shown checksum. This is expected for a video-processing skill but introduces normal dependency provenance risk.

Skill content
curl -sSL https://bootstrap.pypa.io/get-pip.py | python ... python -m pip install "openvino==2025.2.0" numpy opencv-python-headless ... curl -sSL https://johnvansickle.com/ffmpeg/releases/ffmpeg-release-amd64-static.tar.xz
Recommendation

Install only from a trusted environment, prefer system ffmpeg when available, and consider adding pinned dependency versions and checksum verification for downloaded archives.