← Back to Skills Marketplace
94
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install boxed-ffmpeg
Description
Audio/video information extraction, format conversion, and audio extraction using FFmpeg WASM sandbox.
README (SKILL.md)
Boxed FFmpeg Skill
Run FFmpeg commands safely within a WASM sandbox for audio/video processing.
Triggering
Use this skill when the user says:
- "ffmpeg", "media info", "get video information"
- "convert video", "change video format", "格式转换"
- "extract audio", "audio from video", "提取音频"
- "boxed-ffmpeg"
⚠️ Required Plugin
This skill requires the openclaw-wasm-sandbox plugin version >= 0.2.0.
openclaw plugins install clawhub:openclaw-wasm-sandbox
openclaw plugins update openclaw-wasm-sandbox
openclaw gateway restart
⚠️ WASM File Required
If the WASM file does not exist, download it first:
wasm-sandbox-download({
url: "https://raw.githubusercontent.com/guyoung/wasm-sandbox-openclaw-skills/main/boxed-ffmpeg/files/boxed-ffmpeg-component.wasm",
output: "~/.openclaw/skills/boxed-ffmpeg/files/boxed-ffmpeg-component.wasm",
resume: false,
timeout: 120000
})
Tool: wasm-sandbox-run
wasm-sandbox-run({
wasmFile: "~/.openclaw/skills/boxed-ffmpeg/files/boxed-ffmpeg-component.wasm",
workDir: "\x3Cinput-file-directory>",
args: ["\x3CCOMMAND>", "\x3CINPUT>", "\x3COUTPUT>"]
})
Important:
workDirmust be set to the directory containing the input file- Input/output arguments are filenames only (no directory paths)
Commands
| Command | Description | Arguments |
|---|---|---|
info |
Get media file information | \x3CINPUT> |
convert |
Convert video format | \x3CINPUT> \x3COUTPUT> |
extract-audio |
Extract audio from video | \x3CINPUT> \x3COUTPUT> |
Examples
Get Media Information
User says: "Get info about video.mp4" (file in workspace root)
wasm-sandbox-run({
wasmFile: "~/.openclaw/skills/boxed-ffmpeg/files/boxed-ffmpeg-component.wasm",
workDir: "/home/user/.openclaw/workspace",
args: ["info", "video.mp4"]
})
Convert Video Format
User says: "Convert video.mp4 to AVI" (file in workspace root)
wasm-sandbox-run({
wasmFile: "~/.openclaw/skills/boxed-ffmpeg/files/boxed-ffmpeg-component.wasm",
workDir: "/home/user/.openclaw/workspace",
args: ["convert", "video.mp4", "video.avi"]
})
Extract Audio from Video
User says: "Extract audio from video.mp4 as mp3" (file in workspace root)
wasm-sandbox-run({
wasmFile: "~/.openclaw/skills/boxed-ffmpeg/files/boxed-ffmpeg-component.wasm",
workDir: "/home/user/.openclaw/workspace",
args: ["extract-audio", "video.mp4", "audio.mp3"]
})
Convert with Subdirectory
User says: "Convert videos/input.mp4 to videos/output.avi"
wasm-sandbox-run({
wasmFile: "~/.openclaw/skills/boxed-ffmpeg/files/boxed-ffmpeg-component.wasm",
workDir: "/home/user/.openclaw/workspace/videos",
args: ["convert", "input.mp4", "output.avi"]
})
Important Notes
- workDir is required — must be the directory of the input file
- Input/output are filenames only — no paths, just names
- Output file appears in workDir after successful execution
- No network access needed — all processing is local
Usage Guidance
This skill appears to do what it says (FFmpeg in a WASM sandbox) but requires installing a plugin and downloading a WASM binary from a third-party GitHub repo without any checksum or signature. Before installing: (1) Verify the openclaw-wasm-sandbox plugin source and inspect its code/reviews; (2) verify the boxed-ffmpeg-component.wasm provenance — prefer a signed/pinned release or a trusted org repo; (3) if possible, download the WASM manually, verify its integrity, and place it locally rather than letting the agent fetch it automatically; (4) do not set workDir to sensitive system directories — use an isolated workspace; (5) consider testing the plugin and WASM inside an isolated VM/container first; (6) require explicit user consent for plugin installation and gateway restart. If you cannot verify the plugin and WASM authorship and integrity, treat this skill as higher-risk and avoid installing it on sensitive systems.
Capability Analysis
Type: OpenClaw Skill
Name: boxed-ffmpeg
Version: 1.0.0
The skill provides media processing capabilities by instructing the agent to download a remote WASM binary from a personal GitHub repository (guyoung/wasm-sandbox-openclaw-skills) and execute it using a sandbox tool. While this behavior is consistent with the stated goal of providing a 'boxed' FFmpeg environment, the automated downloading and execution of remote payloads (SKILL.md) is a high-risk capability. No clear evidence of malicious intent, such as data exfiltration or unauthorized access, was found, but the reliance on an unverified external binary warrants a suspicious classification.
Capability Assessment
Purpose & Capability
The name/description (Boxed FFmpeg) match the runtime instructions: it requires a WASM sandbox plugin and a boxed-ffmpeg.wasm component and shows how to run ffmpeg-like commands via wasm-sandbox-run. There are no unrelated environment variables or extraneous capabilities requested.
Instruction Scope
Instructions stay within the stated purpose (run FFmpeg-like operations in a WASM sandbox). They only reference workspace directories and the skill-specific path under ~/.openclaw/skills. However, the runtime steps instruct downloading and executing a WASM binary; while the skill claims 'no network access needed' for processing, it still requires an initial network download of the WASM file, and the agent is asked to write that binary into the skills directory.
Install Mechanism
There is no formal install spec, but SKILL.md requires installing the openclaw-wasm-sandbox plugin and explicitly provides a raw GitHub URL to download a WASM component from a user repo (guyoung/... on raw.githubusercontent.com). Downloading and executing an unsigned WASM from an arbitrary user repository and placing it under ~/.openclaw/skills is high-risk because there is no checksum/signature, no pinned release, and the source repo is not described or verified. The plugin installation and gateway restart steps also alter the agent environment and should be reviewed before proceeding.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate. One important note: the skill requires setting workDir to the directory containing input files — any files inside that directory will be accessible to the WASM component, so avoid using sensitive system directories.
Persistence & Privilege
The skill does not request 'always: true', but it requires installing a plugin and restarting the OpenClaw gateway, which modifies the agent runtime environment. Combined with the remote WASM download and autonomous invocation being allowed (default), this increases the blast radius: a downloaded WASM run by the sandbox could be invoked by the agent repeatedly without further confirmation. That combination is worth caution even though autonomous invocation itself is normal.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install boxed-ffmpeg - After installation, invoke the skill by name or use
/boxed-ffmpeg - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of boxed-ffmpeg.
- Run FFmpeg commands securely in a WASM sandbox for audio/video file processing.
- Supports media information extraction, video format conversion, and audio extraction.
- Requires the openclaw-wasm-sandbox plugin (≥ 0.2.0) and the boxed-ffmpeg WASM file.
- Skill usage is triggered by common audio/video conversion and extraction phrases.
- Clear usage instructions and example commands provided for workspace and subdirectory scenarios.
Metadata
Frequently Asked Questions
What is Boxed FFmpeg?
Audio/video information extraction, format conversion, and audio extraction using FFmpeg WASM sandbox. It is an AI Agent Skill for Claude Code / OpenClaw, with 94 downloads so far.
How do I install Boxed FFmpeg?
Run "/install boxed-ffmpeg" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Boxed FFmpeg free?
Yes, Boxed FFmpeg is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Boxed FFmpeg support?
Boxed FFmpeg is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Boxed FFmpeg?
It is built and maintained by guyoung (@guyoung); the current version is v1.0.0.
More Skills