Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real media-processing skill, but its unauthenticated HTTP service can fetch URLs, write workspace files, and expose persisted job details, so users should review its scope before installing.
Install only if you need this local media server and are comfortable with it reading approved media paths, fetching remote URLs, and writing outputs in the workspace. Keep it bound to 127.0.0.1, do not expose it on 0.0.0.0 without authentication, avoid passing sensitive file paths or prompts, use overwrite=false when preserving outputs matters, and consider pinning/updating dependencies before use.
'-y',
audio_path,
]
ffmpeg_result = subprocess.run(cmd, capture_output=True, text=True, timeout=300)
if ffmpeg_result.returncode != 0:
return {
'status': 'error',logger.info(f"命令: {' '.join(cmd[:5])}...")
try:
result = subprocess.run(
cmd,
capture_output=True,
text=True,cmd = ['ffprobe', '-v', 'quiet', '-print_format', 'json', '-show_streams', video_url]
try:
result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
if result.returncode != 0:
return {'status': 'error', 'message': 'ffprobe failed'}def run_command(cmd, cwd):
result = subprocess.run(cmd, cwd=cwd, capture_output=True, text=True)
if result.returncode != 0:
raise RuntimeError(
f"Command failed: {' '.join(cmd)}\nSTDOUT:\n{result.stdout}\nSTDERR:\n{result.stderr}"logger.info(f"输出文件: {output_path}")
try:
result = subprocess.run(
cmd,
capture_output=True,
text=True,requests>=2.28.0 opencv-python>=4.8.0 numpy>=1.24.0 aiohttp>=3.8.0
requests>=2.28.0 opencv-python>=4.8.0 numpy>=1.24.0 aiohttp>=3.8.0 flask>=2.3.0
requests>=2.28.0 opencv-python>=4.8.0 numpy>=1.24.0 aiohttp>=3.8.0 flask>=2.3.0 flask-cors>=4.0.0
requests>=2.28.0 opencv-python>=4.8.0 numpy>=1.24.0 aiohttp>=3.8.0 flask>=2.3.0 flask-cors>=4.0.0 faster-whisper>=1.0.0
opencv-python>=4.8.0 numpy>=1.24.0 aiohttp>=3.8.0 flask>=2.3.0 flask-cors>=4.0.0 faster-whisper>=1.0.0 paddlepaddle>=2.6.0
numpy>=1.24.0 aiohttp>=3.8.0 flask>=2.3.0 flask-cors>=4.0.0 faster-whisper>=1.0.0 paddlepaddle>=2.6.0 paddleocr>=2.7.0
aiohttp>=3.8.0 flask>=2.3.0 flask-cors>=4.0.0 faster-whisper>=1.0.0 paddlepaddle>=2.6.0 paddleocr>=2.7.0
flask>=2.3.0 flask-cors>=4.0.0 faster-whisper>=1.0.0 paddlepaddle>=2.6.0 paddleocr>=2.7.0
flask-cors>=4.0.0 faster-whisper>=1.0.0 paddlepaddle>=2.6.0 paddleocr>=2.7.0
65/65 vendors flagged this skill as clean.
No suspicious patterns detected.