Security audit

AdsTurbo 视频改造 · AdsTurbo Video Transform

Security checks for vulnerabilities and agentic risk

Overview

This skill is coherent, but it enables public media uploads and identity/lip-sync video transformations without enough privacy or consent safeguards.

Review this skill before installing. Use it only with media, voices, and likenesses you are authorized to process, and treat uploaded files as potentially accessible outside your machine. Avoid private, confidential, or non-consensual content unless the AdsTurbo account, storage visibility, retention, and sharing terms are acceptable.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The instructions explicitly direct users to upload local files so they become publicly accessible URLs, but they do not warn that this may expose sensitive photos, audio, or video to third parties or broad internet access. In a workflow handling user-provided assets, omission of a privacy and data-exposure warning can lead to accidental disclosure of personal or confidential content.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill explicitly enables identity swapping and later documents lip-synced translation, but provides no consent, authorization, or anti-impersonation safeguards. In this context, the capability is inherently dual-use and can facilitate deceptive deepfakes, non-consensual likeness use, fraud, or reputational harm, especially because it encourages reuse of existing footage with different spokespeople across campaigns.

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0
Confidence: 96% confidence
Finding: The dependency is specified with a lower-bound only (requests>=2.28.0), which permits installing any later version and makes builds non-reproducible. This increases supply-chain risk because different environments may resolve to different versions, including versions with breaking changes or newly introduced vulnerabilities.

Static analysis

No suspicious patterns detected.