video-merge
Warn
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to run
uvx videoclaw --help, which triggers the download and installation of thevideoclawpackage from the Python Package Index (PyPI). The package is not associated with a known trusted vendor or organization. - [COMMAND_EXECUTION]: The skill uses the
videoclaw mergecommand to process video projects. This involves executing a third-party binary/script that was dynamically installed, posing a risk if the package contains malicious code.
Audit Metadata