30x-web-to-video

SUSPICIOUS. The skill’s capabilities broadly match its video-generation purpose, but it grants the agent a large autonomous footprint: scraping untrusted web content, auto-installing many dependencies, downloading media/models, and rewriting files via shell scripts. There is no strong evidence of credential theft or malicious exfiltration, but the install-and-execute scope is high enough to make this a risky skill to run automatically.

The code appears to be a legitimate local audio beat-analysis and code-generation utility, not malware. It has a command-injection weakness because audioPath is inserted directly into shell command strings; use execFileSync or an argument-array API instead of shell interpolation. Validate FPS as a finite positive number and consider checking that the input is a regular file. Overall risk is moderate only when the audio path can be attacker-controlled; otherwise the observed behavior is expected for the tool.

The code appears intended for controlled project iteration and regeneration. It contains a material security risk because untrusted critique content controls a prompt sent to Claude, which is run with --dangerously-skip-permissions and filesystem/command capabilities. The script also executes npx and mkdir and provides weak path and input validation. No direct malware, credential theft, exfiltration, persistence, or obfuscated payload is present in the code itself. Use only with trusted critique files and isolated project directories; remove dangerous permission bypasses and validate inputs before production use.