call-clips

This is a video clipping and caption-rendering utility, with no evident credential theft, network exfiltration, or backdoor behavior. Unvalidated clip rank values can cause ASS and MP4 writes outside the intended directories, and unescaped hook/style/filter values may alter subtitle or FFmpeg parsing. Severity is moderate when JSON or command-line inputs are untrusted; no suspicious domains, URLs, IP addresses, or targeted credentials are present.