Ffmpeg Master Pro

FFmpeg Master Pro - 全能视频处理技能。当用户需要视频处理时使用，支持视频转换、视频压缩、视频编辑等。当用户要求视频处理, 视频转换, 视频压缩, FFmpeg, 视频编辑, 视频转码, 视频剪辑, 字幕处理, 视频优化, 批量视频处理, GIF转换, 视频翻转, 速度调节, 音频提取, 视频合...

What to consider before installing: - Functional fit: The skill's functionality (building/running ffmpeg commands, GPU detection, presets, batch processing) matches its description — this looks like a legitimate FFmpeg helper. - Declared requirements mismatch: The metadata does not list required binaries or config paths, but SKILL.md and the code clearly expect ffmpeg and ffprobe (and optionally nvidia-smi/amdgpu-info/vainfo). If your environment lacks these tools the skill will fail; the missing declaration is an oversight you should ask the author to correct. - Local execution risks: The skill's scripts execute subprocesses (ffmpeg/ffprobe and system GPU tools) and read/write files. If the agent constructs command lines from untrusted user input, there is a risk of command injection or unintended access to local files. Prefer running this skill in a controlled/sandboxed environment until you audit how inputs are sanitized. - Files written to your system: The PresetManager will create ~/.config/ffmpeg-master/presets for user presets. Expect the skill to create temporary output files and logs in temporary directories or in user-specified locations. If you want to avoid changes to your home directory, run in a VM or container. - No remote downloads detected: There is no installer that downloads arbitrary code from the network at install time, which reduces supply-chain risk. Still review the bundled scripts for any network calls before enabling autonomous invocation. - Recommended actions before enabling: 1) Ask the author/maintainer to correct metadata to declare required binaries and config paths. 2) Review the scripts that will run (scripts/), paying attention to subprocess invocations and any code that touches the network or unsanitized inputs. Look for any subprocess.run or os.system uses that concatenate untrusted strings. 3) Test the skill in an isolated environment (container/VM) with non-sensitive files to verify behavior. 4) If you will run it on a multi-user or production machine, enforce least privilege (run under a restricted user, restrict read/write directories) and confirm input sanitization. If you want, I can highlight specific files/functions that build command lines or perform subprocess calls so you can inspect them for unsafe string handling.

Type: OpenClaw Skill Name: ffmpeg-master-pro Version: 2.3.1 The ffmpeg-master-pro skill bundle is a comprehensive and well-structured toolkit for advanced video processing. It implements sophisticated logic for video analysis, intelligent bitrate calculation, and hardware acceleration detection. The Python scripts (e.g., decision_engine.py, ffmpeg_builder.py, and two_pass_encoder.py) use best practices for executing external commands, specifically employing subprocess.run and subprocess.Popen with shell=False and shlex.split to mitigate shell injection risks. The documentation and SKILL.md instructions are strictly aligned with the tool's purpose and even include security-conscious advice, such as avoiding the exposure of full file paths to the user. No indicators of data exfiltration, malicious persistence, or unauthorized network activity were found.