Skills/npm/editor

editor@0.4.1

CAUTION· install only

Publisher claims: "Open-source AI video editor for Claude Code and MCP clients: remove silence, edit by transcript with local whisper.cpp, add captions, and export to Final Cut Pro, DaVinci Resolve or Premiere. Runs locally on FFmpeg." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher makemyclip · publishing for 170 daysInstalls 610Last detonated 6d ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; Privileged sudo command; Privileged sudo command. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Privileged sudo commanddist/index.js:640 · Privileged sudo command — agent may execute with elevated privileges…that lists drawtext in \`ffmpeg -hide_banner -filters\`. On Debian or Ubuntu: \`sudo apt install ffmpeg\`, then \`export MAKEMYCLIP_FFMPEG_PATH=/usr/bin/ffmpeg\` (fo…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commanddist/cli.js:2034 · Privileged sudo command — agent may execute with elevated privileges…that lists drawtext in \`ffmpeg -hide_banner -filters\`. On Debian or Ubuntu: \`sudo apt install ffmpeg\`, then \`export MAKEMYCLIP_FFMPEG_PATH=/usr/bin/ffmpeg\` (fo…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commanddist/cli.js:5185 · Privileged sudo command — agent may execute with elevated privilegesfix: deps.platform === "linux" ? `On Debian or Ubuntu, \`sudo apt install fonts-dejavu-core\`, or set ${setFont}.` : `Set ${setFont}.`Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commanddist/cli.js:5136 · Privileged sudo command — agent may execute with elevated privileges…that lists drawtext in \`ffmpeg -hide_banner -filters\`. On Debian or Ubuntu: \`sudo apt install ffmpeg\`, then \`export ${FFMPEG_PATH_ENV}=/usr/bin/ffmpeg\`.` }; …Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commanddist/cli.js:5084 · Privileged sudo command — agent may execute with elevated privilegesreturn "on Debian or Ubuntu, `sudo apt install ffmpeg`";Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commanddist/cli.js:687 · Privileged sudo command — agent may execute with elevated privileges…ing}". Install one that does (for Chinese, Japanese or Korean, Noto Sans CJK: \`sudo apt install fonts-noto-cjk\` on Debian or Ubuntu), or set MAKEMYCLIP_FALLBACK_FO…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commanddist/index.js:4543 · Privileged sudo command — agent may execute with elevated privilegesreturn "on Debian or Ubuntu, `sudo apt install ffmpeg`";Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Unicode escape sequence detecteddist/index.js:1069 · Unicode escape sequence detected — may contain obfuscated payloads"/System/Library/Fonts/\u30D2\u30E9\u30AE\u30CE\u89D2\u30B4\u30B7\u30C3\u30AF W3.ttc",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
npx invocation of non-well-known packageSKILL.md:10 · npx invocation of non-well-known package — may execute untrusted codeinstall: npx skills add MakeMyClip/editorFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:74 · npx invocation of non-well-known package — may execute untrusted codenpx -y @makemyclip/editor trim <input> <start> <end>Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:60 · npx invocation of non-well-known package — may execute untrusted codenpx -y @makemyclip/editor split <input> <atSec>Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Privileged sudo commanddist/index.js:4596 · Privileged sudo command — agent may execute with elevated privileges…that lists drawtext in \`ffmpeg -hide_banner -filters\`. On Debian or Ubuntu: \`sudo apt install ffmpeg\`, then \`export ${FFMPEG_PATH_ENV}=/usr/bin/ffmpeg\`.` }; …Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File type combined with upload actiondist/cli.js:7898 · File type combined with upload action — agent may exfiltrate local data filesreturn c.json({ error: `Could not parse upload: ${message}` }, 400);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageSKILL.md:88 · npx invocation of non-well-known package — may execute untrusted codenpx -y @makemyclip/editor add_text <input> <text> <position> <startSec> <endSec>Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actiondist/index.d.ts:1998 · File type combined with upload action — agent may exfiltrate local data files* from `composition.json` so the render input stays a clean document.Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Destructive file system command detecteddist/web/assets/index-CbbPFv-0.js:9 · Destructive file system command detected…tput`,tools:[{name:`render`,label:`Render`,description:`Re-encode to a specific format / quality / size.`}]}];function rt({open:e,onClose:t,onPick:n}){return e?(0,v.jsx…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packageSKILL.md:38 · npx invocation of non-well-known package — may execute untrusted codenpx -y @makemyclip/editor ingest <input>Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionSKILL.md:331 · File type combined with upload action — agent may exfiltrate local data files…) writes FCPXML 1.10 for Final Cut Pro and DaVinci Resolve; `timeline export cut.xml` (or `--format xmeml`) writes Final Cut Pro 7 XML for Premiere Pro, which Resolve reads too. Premiere doesn't import FCPXML, so use `xmeml` for it. Both r…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actiondist/web/assets/index-CbbPFv-0.js:9 · File type combined with upload action — agent may exfiltrate local data files… n=await fetch(`/api/timeline/transcript/${encodeURIComponent(e.id)}`),r=await n.json();if(t!==g.current)return;if(!n.ok)throw Error(r.error??`HTTP ${n.status}`);a(r)}catch(e){t===g.current&&u(e instanceof Error?e.message:String(e))}finall…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Privileged sudo commanddist/index.js:4645 · Privileged sudo command — agent may execute with elevated privilegesfix: deps.platform === "linux" ? `On Debian or Ubuntu, \`sudo apt install fonts-dejavu-core\`, or set ${setFont}.` : `Set ${setFont}.`Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Base64 encoding combined with network calldist/web/assets/index-CbbPFv-0.js:9 · Base64 encoding combined with network call — potential data exfiltration…~`&&n!==`$!`||e++}n=r}while(n)}function Tp(e,t,n){if(t=CSS.escape(t)===t?t:`r-`+btoa(t).replace(/=/g,``),e.style.viewTransitionName=t,n!=null&&(e.style.viewTransitionClass=n),n=getComputedStyle(e),n.display===`inline`){if(t=e.getClientRect…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
HIGH
Privileged sudo commanddist/index.js:1048 · Privileged sudo command — agent may execute with elevated privileges…ing}". Install one that does (for Chinese, Japanese or Korean, Noto Sans CJK: \`sudo apt install fonts-noto-cjk\` on Debian or Ubuntu), or set MAKEMYCLIP_FALLBACK_FO…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File type combined with upload actiondist/cli.js:7799 · File type combined with upload action — agent may exfiltrate local data filesreturn c.json({ id: entry.id, output: result.output, durationSec: plan.durationSec });Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Unicode escape sequence detecteddist/cli.js:538 · Unicode escape sequence detected — may contain obfuscated payloads"/System/Library/Fonts/\u30D2\u30E9\u30AE\u30CE\u89D2\u30B4\u30B7\u30C3\u30AF W3.ttc",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
File type combined with upload actiondist/web/assets/index-CbbPFv-0.js:8 · File type combined with upload action — agent may exfiltrate local data files…nstable_NormalPriority,et=t.unstable_LowPriority,tt=t.unstable_IdlePriority,nt=t.log,rt=t.unstable_setDisableYieldValue,it=null,at=null;function ot(e){if(typeof nt==`function`&&rt(e),at&&typeof at.setStrictMode==`function`)try{at.setStrict…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈5,682 tok
1 file · 11 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

No advisories in OSV for @makemyclip/editor@0.4.1 as of 6d ago. This is the package itself, not its dependencies.

What would make this Verified

12 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim makemyclip: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Obfuscated code≈ +5 on the totalRemove base64-assembled strings, eval of decoded text and minified blobs. Reviewers and scanners both treat unreadable code as hostile.
  3. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. Destructive file system command detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. Base64 encoding combined with network call≈ +4 on the totalPut hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
  6. Unicode escape sequence detected≈ +2 on the totalPut hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
Publish a new version to npm, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim makemyclipPropose a patch to the maintainer