FMT视频制作工具 v1.0

PassAudited by ClawScan on May 12, 2026.

Overview

This is a coherent video-production skill, but it can run local media commands and send narration text to generation/TTS tools.

This appears safe to use for its stated video-production purpose if you are comfortable with the agent running ffmpeg/Python in /workspace and sending narration or prompts to media-generation tools. Review file paths and avoid sensitive personal medical data in TTS text.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run ffmpeg/ffprobe commands and create or overwrite video outputs in the workspace.

Why it was flagged

The skill explicitly uses command execution for video processing. This is expected for ffmpeg-based video composition, but users should notice that local commands may be run.

Skill content
| `exec`(ffmpeg)| 视频合成、字幕烧录、音画同步 |
Recommendation

Run it only on intended workspace media files, and review paths before executing ffmpeg commands.

What this means

The agent may execute small Python snippets that write subtitle files under /workspace.

Why it was flagged

The skill includes inline Python to generate SRT subtitle files. This is purpose-aligned and scoped, but it is still code execution.

Skill content
python3 -c ... with open('/workspace/fmt_s01.srt', 'w', encoding='utf-8') as f:
Recommendation

Confirm the output filename and subtitle text before allowing Python snippets to run.

What this means

Narration text or prompts may be processed by external or platform media-generation tooling.

Why it was flagged

The skill sends narration text to a TTS/media-generation tool and indicates the generated audio is automatically sent. This is expected for the skill, but it is a data flow users should understand.

Skill content
工具:`tts` — 直接生成音频,自动发送
Recommendation

Avoid including sensitive personal or medical information in narration unless you are comfortable sending it to the TTS/video-generation provider.

What this means

The skill may fail or behave differently depending on what local binaries are already available.

Why it was flagged

The registry metadata does not declare runtime dependencies, while the visible skill instructions rely on tools such as ffmpeg/ffprobe and python3. This is an under-declared setup requirement, not evidence of malicious behavior.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

Verify the local ffmpeg, ffprobe, and python3 environment before use.