Security audit
Security checks across malware telemetry and agentic risk
The core prompt tool is plausible, but the package also contains under-disclosed installers, credential checks, cloud uploads, and social posting features that need human review.
Install only if you intend to use the full video generation and publishing toolkit, not just prompt optimization. Prefer prompt-only mode, review the scripts before running them, avoid setting social cookies or broad cloud credentials unless needed, and require manual confirmation before dependency installs, uploads, API calls, or public posts.
# 安装依赖
requirements = target_path / "requirements.txt"
if requirements.exists():
subprocess.run(
[sys.executable, "-m", "pip", "install", "-r", str(requirements)],
check=True, timeout=600,
)64/64 vendors flagged this skill as clean.
No suspicious patterns detected.