Claude Code Video Toolkit
skills · by wilwaldon
Skills, MCP servers, and tools for producing video with Claude Code. Covers programmatic video (Remotion, Manim), screen recording, YouTube clipping, and FFmpeg post-processing.
No known CVEs
No license
Maintained
Last commit 142d ago
Untested
Transport: stdio, sse, http
2 tools · ~53 tok
Grade A · 0.0% of 200K ctx
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Untested on Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"claude-code-video-toolkit": {
"args": [
"-y",
"skills"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/claude-code-video-toolkit)
Read me
What Claude Code Video Toolkit does
Skills, MCP servers, and tools for producing video with Claude Code. Covers programmatic video (Remotion, Manim), screen recording, YouTube clipping, and FFmpeg post-processing.
Test This Server
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Loading README…
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
83/100across 5 weighted dimensions
0255075100
30
10
20
13
10
−17
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev11 fixed
CVE-2026-50574high · fixedCVSS 8.3
yt-dlp: Arbitrary code execution via manifest downloads with aria2c
### Summary If aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On Windows platforms, this can lead to immediate arbitrary code execution. On non-Windows platforms, this can lead to arbitrary code execution upon the next invocation of yt-dlp. ### Details When downloading a fragmented manifest format such as an HLS or DASH strea
CVE-2026-50023high · fixedCVSS 8.3
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
### Summary A vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files (such as `.desktop`, `.url`, `.webloc`) to the user's filesystem, bypassing the remediation for `CVE-2024-38519`. ### Details The fix for `CVE-2024-38519` enforced an allowlist for file extensions, in order to prevent writing files with unsafe extensions (such as `.exe` or `.sh`) during file downloads. However, this allowlist explicitly included the unsafe extensions `.desktop`, `.ur
CVE-2026-50019medium · fixedCVSS 6.1
yt-dlp: File Downloader cookie leak with curl
### Summary If curl is used an external downloader for yt-dlp, cookies may be leaked to an unintended host upon HTTP redirect or when the host for download fragments differs from their parent manifest's. This is the equivalent to [GHSA-v8mc-9377-rwjj](<https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-v8mc-9377-rwjj>) for the `curl` downloader. The vulnerable behavior is present in [yt-dlp](https://github.com/yt-dlp/yt-dlp) released since 2023.09.24. ### Details At the file download st
CVE-2026-26331high · fixedCVSS 8.8
yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option
### Summary When yt-dlp's `--netrc-cmd` command-line option (or `netrc_cmd` Python API parameter) is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL. ### Impact yt-dlp maintainers assume the impact of this vulnerability to be high for anyone who uses `--netrc-cmd` in their command/configuration or `netrc_cmd` in their Python scripts. Even though the maliciously crafted URL itself will look very suspicious to many users, it would be
CVE-2024-38519high · fixedCVSS 7.8
yt-dlp File system modification and RCE through improper file-extension sanitization
### Summary `yt-dlp` does not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder (and path traversal on Windows). Since `yt-dlp` also reads config from the working directory (and on Windows executables will be executed from the yt-dlp directory) this could lead to arbitrary code being executed. ### Patches `yt-dlp` version 2024.07.01 fixes this issue by whitelisting the allowed extensions. This means some very uncommon extensio
Inventory
Tools (2)
Click any tool to inspect its schema.
~53 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Claude Code Video Toolkit safe to use?
- Claude Code Video Toolkit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
- How do I install Claude Code Video Toolkit?
- Claude Code Video Toolkit supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Claude Code Video Toolkit do?
- Claude Code Video Toolkit provides 2 tools: Contributing, License. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Claude Code Video Toolkit?
- Claude Code Video Toolkit is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.
- Is Claude Code Video Toolkit actively maintained?
- Claude Code Video Toolkit is less actively maintained — last commit was 142 days ago. It has 60 GitHub stars.
Related
Similar servers
Others in entertainment
Unity MCP91AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Efficient token usage, advanced tools. Any C# method may be turned into a tool by a single line. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for free.
3.4k 7
M
Music Studio MCP Server88Music studio: ABC notation composition and Strudel live coding with ext-apps UI.
56 5
I
io.github.thatsrajan/vidlens-mcp88YouTube as a queryable database for AI agents. 41 tools, zero config.
28 7
Elevenlabs Mcp87The official ElevenLabs MCP server
1.4k 9
MCP Security Weekly
Get CVE alerts and security updates for Claude Code Video Toolkit and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.