clipcast-clipping

SUSPICIOUS. The skill’s stated video-clipping purpose is coherent, and the referenced credential providers are official, but the core executable it asks the agent to trust is not verifiably official or publicly distributed. The skill relies on an ambiguous globally installed clipcast command or a personal local Python path, then expects that tool to handle vendor API credentials and external media retrieval without documenting its real network destinations. That makes the supply-chain and credential-forwarding footprint disproportionally risky for a published skill.