Skills/ClawHub/550w-ai-subtitle-remover

550w-ai-subtitle-remover@2.0.0

VERIFIED

Publisher claims: "Remove hardcoded video subtitles, watermarks from short-video share links, and image watermarks or unwanted text with the 550W Open API; check processing tasks and credits. Use for user-selected media or public share links." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher sunshinehu · joined 4 days agoInstalls 1,332Last detonated 4d ago
$clawhub install 550w-ai-subtitle-remover
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-10-30 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 60 s · 2 scenarios
t+CategoryObserved action
0.0sprocessno install scripts in bundle
60sprocessdependency install exceeded 60s
60sprocessexec /usr/bin/timeout
60sprocessexited 1:
60sclaimedno tools/list reply (exit 1)
60sprocessscript backend runs setup only

Static findings

MEDIUM
Unicode escape sequence detecteddist/550w-skill.cjs:280 · Unicode escape sequence detected — may contain obfuscated payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Unicode escape sequence detecteddist/550w-skill.cjs:283 · Unicode escape sequence detected — may contain obfuscated payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Unicode escape sequence detecteddist/550w-skill.cjs:439 · Unicode escape sequence detected — may contain obfuscated payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
HIGH
Access to sensitive file pathsdist/credential-manager.js:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Unicode escape sequence detecteddist/550w-skill.cjs:297 · Unicode escape sequence detected — may contain obfuscated payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
HIGH
Access to sensitive file pathsdist/550w-skill.cjs:254 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05