ffmpeg-webassembly-workers

Enables browser-based video processing using FFmpeg with WebAssembly for seamless client-side transcoding and integration with frameworks.

Install this skill

or

0/100

Security score

The ffmpeg-webassembly-workers skill was audited on Feb 21, 2026 and we found 31 security issues across 3 threat categories, including 2 critical. Review the findings below before installing.

Categories Tested

Security Issues

critical line 30

Direct command execution function call

SourceSKILL.md

30	\| Convert WebM→MP4 \| `await ffmpeg.exec(['-i', 'input.webm', 'output.mp4'])` \|

critical line 31

Direct command execution function call

SourceSKILL.md

31	\| Extract frame \| `await ffmpeg.exec(['-i', 'video.mp4', '-ss', '5', '-vframes', '1', 'thumb.jpg'])` \|

high line 97

Direct command execution function call

SourceSKILL.md

97	await ffmpeg.exec(['-i', 'input.webm', 'output.mp4']);

high line 123

Direct command execution function call

SourceSKILL.md

123	await ffmpeg.exec(['-i', 'input.webm', '-threads', '4', 'output.mp4']);

high line 235

Direct command execution function call

SourceSKILL.md

235	await ffmpeg.exec([

high line 274

Direct command execution function call

SourceSKILL.md

274	await ffmpeg.exec(['-i', 'input.webm', '-c:v', 'libx264', 'output.mp4']);

high line 279

Direct command execution function call

SourceSKILL.md

279	await ffmpeg.exec(['-i', 'video.mp4', '-vn', '-c:a', 'libmp3lame', 'audio.mp3']);

high line 284

Direct command execution function call

SourceSKILL.md

284	await ffmpeg.exec(['-i', 'video.mp4', '-ss', '00:00:05', '-vframes', '1', 'thumb.jpg']);

high line 289

Direct command execution function call

SourceSKILL.md

289	await ffmpeg.exec([

high line 301

Direct command execution function call

SourceSKILL.md

301	await ffmpeg.exec([

high line 311

Direct command execution function call

SourceSKILL.md

311	await ffmpeg.exec([

high line 529

Direct command execution function call

SourceSKILL.md

529	await ffmpeg.exec(['-i', 'input.mp4', 'output.mp4']);

medium line 91

Template literal with variable interpolation in command context

SourceSKILL.md

91	coreURL: await toBlobURL(`${baseURL}/ffmpeg-core.js`, 'text/javascript'),

medium line 92

Template literal with variable interpolation in command context

SourceSKILL.md

92	wasmURL: await toBlobURL(`${baseURL}/ffmpeg-core.wasm`, 'application/wasm'),

medium line 117

Template literal with variable interpolation in command context

SourceSKILL.md

117	coreURL: await toBlobURL(`${baseURL}/ffmpeg-core.js`, 'text/javascript'),

medium line 118

Template literal with variable interpolation in command context

SourceSKILL.md

118	wasmURL: await toBlobURL(`${baseURL}/ffmpeg-core.wasm`, 'application/wasm'),

medium line 119

Template literal with variable interpolation in command context

SourceSKILL.md

119	workerURL: await toBlobURL(`${baseURL}/ffmpeg-core.worker.js`, 'text/javascript'),

medium line 224

Template literal with variable interpolation in command context

SourceSKILL.md

224	coreURL: await toBlobURL(`${baseURL}/ffmpeg-core.js`, 'text/javascript'),

medium line 225

Template literal with variable interpolation in command context

SourceSKILL.md

225	wasmURL: await toBlobURL(`${baseURL}/ffmpeg-core.wasm`, 'application/wasm'),

medium line 397

Template literal with variable interpolation in command context

SourceSKILL.md

397	`https://api.cloudflare.com/client/v4/accounts/${env.ACCOUNT_ID}/stream`,

medium line 401

Template literal with variable interpolation in command context

SourceSKILL.md

401	'Authorization': `Bearer ${env.API_TOKEN}`,

medium line 506

Template literal with variable interpolation in command context

SourceSKILL.md

506	fetch(`${baseURL}/ffmpeg-core.js`).then(r => r.blob()),

medium line 507

Template literal with variable interpolation in command context

SourceSKILL.md

507	fetch(`${baseURL}/ffmpeg-core.wasm`).then(r => r.blob()),

low line 341

Fetch to external URL

SourceSKILL.md

341	const response = await fetch('https://your-ffmpeg-api.com/transcode', {

low line 75

External URL reference

SourceSKILL.md

75	<script src="https://cdn.jsdelivr.net/npm/@ffmpeg/[email protected]/dist/umd/ffmpeg.min.js"></script>

low line 89

External URL reference

SourceSKILL.md

89	const baseURL = 'https://cdn.jsdelivr.net/npm/@ffmpeg/[email protected]/dist/umd';

low line 115

External URL reference

SourceSKILL.md

115	const baseURL = 'https://cdn.jsdelivr.net/npm/@ffmpeg/[email protected]/dist/umd';

low line 222

External URL reference

SourceSKILL.md

222	const baseURL = 'https://cdn.jsdelivr.net/npm/@ffmpeg/[email protected]/dist/umd';

low line 341

External URL reference

SourceSKILL.md

341	const response = await fetch('https://your-ffmpeg-api.com/transcode', {

low line 397

External URL reference

SourceSKILL.md

397	`https://api.cloudflare.com/client/v4/accounts/${env.ACCOUNT_ID}/stream`,

low line 504

External URL reference

SourceSKILL.md

504	const baseURL = 'https://cdn.jsdelivr.net/npm/@ffmpeg/[email protected]/dist/umd';

Scanned on Feb 21, 2026

View Security Dashboard

Installation guide →

GitHub Stars 20

Rate this skill

Categorydevelopment

UpdatedMay 13, 2026

openclaw frontend api frontend-developer product-manager growth-pm development product

JosiahSiegel/claude-plugin-marketplace