Multimedia Manager

Self-hosted agent to organize, search, and browse images and videos with auto-deduplication, full-text search, albums, favorites, and a responsive web gallery.

This package appears to do what it says: a local image/video vault with a token-protected web gallery. Before installing: 1) Inspect setup.sh yourself — it runs pip to install three PyPI packages (Flask, Pillow, PyYAML). If you prefer, install those packages manually instead of running setup.sh. 2) Keep IMAGE_VAULT_DIR pointed to a dedicated folder (default ~/.image-vault); don't point it at a system or shared folder you care about, because cleanup_inbound.py can delete files in the inbound subfolder (use --dry-run to verify). 3) The web UI is token-protected and binds to 127.0.0.1 by default — do not change the host to 0.0.0.0 unless you intend to expose it. 4) The registry metadata omitted the required IMAGE_VAULT_TOKEN entry; trust the skill's SKILL.md/code instead and ensure you preserve the generated token. 5) If you need absolute assurance, review the truncated/omitted functions (e.g., backup_db, delete_image) in image_db.py before running to confirm backups and deletes behave as you expect.

Type: OpenClaw Skill Name: multimedia-manager Version: 1.0.6 The Multimedia Manager is a legitimate local media management tool. It provides functionality for importing, searching, and viewing images/videos via a CLI and a Flask-based web gallery. The code includes security best practices such as token-based authentication, path-traversal protection in the file-serving endpoint (`web_server.py`), and parameterized SQLite queries (`image_db.py`). While it uses subprocesses for `ffmpeg` and performs file deletions for cleanup, these actions are scoped to the application's data directory and are clearly documented in the `SKILL.md` transparency section. No evidence of data exfiltration, malicious persistence, or prompt injection was found.