Is video-frames safe?
Yes. video-frames is safe to install. Oathe's behavioral security audit gave video-frames a trust score of 95/100 with 2 findings, none critical or high.
https://clawhub.ai/steipete/video-frames
Is video-frames safe to install?
This is a clean, minimal utility skill that wraps ffmpeg for video frame extraction. It contains no prompt injection, no data exfiltration vectors, no suspicious clone behavior, and all canary files remain intact. The only minor finding is that the --index parameter is not validated as an integer before interpolation into an ffmpeg filter string, which is low severity.
What security issues were found in video-frames?
Category Scores
Findings (2)
LOW Unsanitized --index parameter in ffmpeg filter -15 ▶
The --index argument is interpolated directly into the ffmpeg -vf select filter as eq(n,${index}) without validation that it is a non-negative integer. A crafted value could inject additional ffmpeg filter graph expressions. However, this does not escalate to shell injection (the value is already inside a quoted ffmpeg argument) and the practical impact is limited to unexpected ffmpeg behavior.
INFO Executable bash script included 0 ▶
The skill ships scripts/frame.sh, a bash script that invokes ffmpeg. This is expected and appropriate for the skill's stated purpose. The script uses strict bash settings (set -euo pipefail) and has proper argument parsing with a usage function.
Should I install video-frames?
Oathe's verdict for video-frames is SAFE with a trust score of 95/100. Recommendation: Install.