Skills/ClawHub/ai-video-auto-generator

ai-video-auto-generator@2.7.1

VERIFIED· install only

Publisher claims: "AI video auto pipeline: from idea to final video, one command. Script generation → auto repair → assets → video → audio → subtitles, fully automated." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher jinxuchen2020 · publishing for 121 daysInstalls 1,139Last detonated 3d ago
$clawhub install ai-video-auto-generator
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-11 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/agnes_provider.py:254 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/feishu.py:136 · Python subprocess execution detectedr = subprocess.run(cmd_line, capture_output=True, text=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/project-generate/scripts/modules/hyperframes_stitch.py:10 · npx invocation of non-well-known package — may execute untrusted code- hyperframes（通过 `npx hyperframes` 自动安装或已安装在 workspace）Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/feishu.py:378 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/pipeline.py:31 · Python subprocess execution detectedp = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/project-generate/scripts/modules/hyperframes_stitch.py:290 · npx invocation of non-well-known package — may execute untrusted codeprint("[HF] ❌ hyperframes 不可用，请先运行: npx hyperframes init")Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Unicode escape sequence detectedskills/project-generate/scripts/modules/speech.py:58 · Unicode escape sequence detected — may contain obfuscated payloadst = re.sub(r'[u201c\u201d\u2018\u2019\u2014\u2013\u2026\u00b7\uff08\uff09\u300a\u300b\u3008\u3009\\\'\"]', '', t)Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
npx invocation of non-well-known packageskills/project-generate/scripts/modules/hyperframes_stitch.py:285 · npx invocation of non-well-known package — may execute untrusted code# 调用 npx hyperframes renderFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/script_generator.py:90 · Python subprocess execution detectedr = subprocess.run(cmd, capture_output=True, text=True, timeout=30)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/pipeline.py:134 · Python subprocess execution detectedsubprocess.run(cmd, capture_output=True, text=True, timeout=60)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/hyperframes_stitch.py:207 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/pipeline.py:59 · Python subprocess execution detectedr = subprocess.run(cmd, cwd=proj, capture_output=True, text=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/SKILL.md:212 · Python subprocess execution detected- 直接用 `subprocess.Popen(cmd, stdout=open(log), startupinfo=si)` 启动Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/project-generate/scripts/modules/hyperframes_stitch.py:181 · npx invocation of non-well-known package — may execute untrusted codeprint("[HF] hyperframes 未安装，尝试: npx hyperframes init")Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/launch_background.py:50 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/stitch_ffmpeg.py:327 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/hyperframes_stitch.py:330 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/project-generate/scripts/modules/stitch.py:8 · npx invocation of non-well-known package — may execute untrusted code1. hyperframes (npx hyperframes render)Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/feishu.py:140 · Python subprocess execution detectedr = subprocess.run([_LARK_EXE] + args, capture_output=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/project-generate/scripts/modules/hyperframes_stitch.py:5 · npx invocation of non-well-known package — may execute untrusted code生成 Hyperframes HTML 合成文件，调用 `npx hyperframes render` 输出最终视频。Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/feishu.py:364 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/_paths.py:234 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/pipeline.py:88 · Python subprocess execution detectedsubprocess.run([py, create_script, "--project", sample_dir,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/pipeline.py:172 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/agnes_provider.py:369 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/_shared_tools.py:170 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif path.endswith(".env"):Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/audio.py:171 · Python subprocess execution detectedr = subprocess.run(cmd, capture_output=True, text=True, encoding="utf-8", errors="replace", timeout=60)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/script_generator.py:70 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/project-generate/scripts/modules/stitch_ffmpeg.py:184 · Python subprocess execution detectedr = subprocess.run(cmd, capture_output=True, text=True, encoding="utf-8", errors="replace", timeout=1800)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈9,173 tok
4 files · 83 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.