Media Analyzer

Analyze local or online audio and video files to extract detailed media metadata, audio features, video frames, and waveform visualizations.

This skill appears to be a straightforward ffmpeg/ffprobe-based media analysis helper. Before installing: 1) Be aware you must have ffmpeg/ffprobe installed from a trusted source; the registry metadata didn't declare binaries but SKILL.md and the script require them. 2) The tool operates on local files (batch mode will iterate every file in a directory), so avoid pointing it at directories containing sensitive data unless you trust the outputs. 3) The script parses ffprobe JSON using grep/cut (fragile but not malicious); test on non-critical files first. 4) If you need explicit network behavior (download remote media), confirm with the author whether that is supported and safe. Running the script in a sandbox or with non-sensitive sample files is a good precaution.

Type: OpenClaw Skill Name: media-analyze-pro Version: 1.0.0 The skill bundle provides legitimate media analysis functionality using ffmpeg and ffprobe, but the underlying bash script (media-analyzer.sh) contains shell injection vulnerabilities. Specifically, user-provided arguments such as 'timestamp' and 'output' are used directly in command strings without sanitization, which could allow an attacker to execute arbitrary commands if the OpenClaw agent is manipulated into passing malicious strings. While the intent appears benign and aligned with the stated purpose in SKILL.md, the lack of input validation constitutes a high-risk vulnerability.