Skill Video Caption Overlay

Render TikTok-style animated pill captions onto short-form videos using MoviePy + PIL. Takes a base MP4, a captions JSON, and optional background audio — out...

This skill appears to be what it says: a local Python script that overlays animated pill captions on videos. Things to check before running: 1) Fix the hardcoded font defaults — the script uses '/home/aladdin/.local/share/fonts/...' even though the README says '~/.local/share/fonts/'; change those defaults to use os.path.expanduser('~/.local/...') or pass --font-black/--font-bold with absolute paths. 2) Run the script on sample files first to confirm behavior and avoid pointing it at sensitive system files. 3) Confirm you trust the source before running — although no network calls or credential access are present, the script will read any file path you give it and write the output file. 4) Ensure you have uv, moviepy, and pillow installed in a controlled environment (virtualenv/container) if you want to limit side effects.

Type: OpenClaw Skill Name: skill-video-caption-overlay Version: 1.0.0 The skill is classified as suspicious due to a hardcoded, non-portable file path in `scripts/overlay.py`. The script defaults to `/home/aladdin/.local/share/fonts/Montserrat-Black.ttf` and `/home/aladdin/.local/share/fonts/Montserrat-Bold.ttf` for font files if not explicitly provided. While not directly malicious, this constitutes a vulnerability as it leaks a specific username ('aladdin'), is unlikely to work for most users, and accesses a path outside the skill's bundle and common system-wide font directories, which is a risky capability without clear malicious intent. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection in any of the files.