Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent English-to-Chinese dubbing workflow, but it under-discloses that subtitle text is sent to Microsoft through edge-tts despite claiming the stack is offline.
Install only if you are comfortable sending translated subtitle text to Microsoft via edge-tts. Avoid using it on confidential, regulated, or private video content unless that external TTS data flow is acceptable, and check for existing output files before running because ffmpeg commands may overwrite them.
The README states the stack is entirely offline/free, but the same document later admits edge-tts depends on Microsoft's online service. This is a security-relevant misrepresentation because users may process sensitive video/audio content under the false assumption that no data leaves their environment.
The README does not clearly warn, at the point of use, that the TTS step transmits subtitle or script content to an external Microsoft service. In a dubbing workflow, subtitles may contain confidential business, personal, or regulated information, so silent cloud transmission creates a meaningful privacy and compliance risk.
The skill clearly instructs the agent to read and write local files and inspect the environment, yet it declares no explicit tool scope or permission boundaries. That creates an authorization ambiguity where the runtime may grant broader file or environment access than users expect, increasing the risk of unintended data exposure or modification.
The skill is explicitly defined as an English-to-Chinese dubbing pipeline and the instructions require producing Chinese subtitles and Chinese speech. This is a natural-language locale constraint that does not present the user with a language choice or opt-in within the skill description.
The instructions mandate ffmpeg's -y flag, which will overwrite existing output files without prompting, but the skill does not require a user-facing warning before destructive writes. In a directory containing prior output.mp4, output.mp3, or similarly named artifacts, this can silently destroy user data or replace results from earlier runs.
This markdown file presents all guidance and operational instructions exclusively in Chinese, and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The document is entirely framed around producing Chinese dubbing and includes prescriptive guidance such as limiting Chinese character counts and optimizing '中文解说' timing. There is no indication that the language choice is optional or user-selected, which can violate a language/locale policy when a skill imposes a specific language by default.
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
return
try:
with open(value, "a"):
pass
print(f" OK SSLKEYLOGFILE {value}（实测可写）")
return
The module docstring, CLI help text, and runtime messages are all written in Chinese, which imposes a specific language on users. Under the policy, locale/language constraints should be opt-in or clearly justified as region-specific; this file provides neither.
The file’s docstring, user-facing error messages, and argument descriptions are written in Chinese throughout, while the script processes English audio and does not provide any user opt-in or alternate locale. This creates a natural-language locale policy concern because the skill effectively enforces a specific interface language without documented choice or region-specific justification.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
permit persons to whom the Software is furnished to do so.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
The natural-language content in this requirements file is entirely in Chinese, including installation guidance and troubleshooting notes. For a general-purpose dependency file, this imposes a language constraint on users without opt-in or a documented region-specific justification, matching the language/locale policy concern.
Using an unpinned dependency range for openai-whisper allows future versions to be installed without review, which can introduce breaking changes or malicious/suspect upstream updates through the software supply chain. In a media-processing skill that depends on external packages and native/transitive dependencies like torch/ffmpeg-adjacent tooling, this increases exposure to compromised releases and reduces build reproducibility.
# Python 依赖，推荐安装顺序见文件末尾
openai-whisper>=20230124
edge-tts>=7.0.0
pysrt>=1.1.2
pydub>=0.25.1
Using edge-tts>=7.0.0 permits automatic installation of newer unreviewed releases, creating a supply-chain risk and making builds non-reproducible. Because this skill processes user-supplied media and synthesizes audio through third-party code paths, an unsafe upstream release could affect integrity or availability of the environment.
# Python 依赖，推荐安装顺序见文件末尾
openai-whisper>=20230124
edge-tts>=7.0.0
pysrt>=1.1.2
pydub>=0.25.1
pysrt>=1.1.2 is unpinned, so future releases may be pulled in unexpectedly, weakening reproducibility and opening a smaller but real supply-chain attack surface. While this package is less inherently sensitive than core model/runtime dependencies, subtitle parsing still operates on external content and should be tightly version-controlled.
openai-whisper>=20230124
edge-tts>=7.0.0
pysrt>=1.1.2
pydub>=0.25.1
# Python 3.13 起标准库移除了 audioop，而 pydub 依赖它。
pydub>=0.25.1 allows unreviewed future versions to enter the environment, creating supply-chain and stability risk. In this skill, pydub participates in audio handling and interfaces with ffmpeg/ffprobe-related workflows, so unexpected upstream changes or compromise could impact media processing integrity or cause denial of service.
openai-whisper>=20230124
edge-tts>=7.0.0
pysrt>=1.1.2
pydub>=0.25.1
# Python 3.13 起标准库移除了 audioop，而 pydub 依赖它。
# 在 3.13+ 上不装这个包，import pydub 会直接失败。
This Python file contains its primary documentation and all console messaging in Chinese, which imposes a specific language on users without any opt-in or fallback. Under the policy for natural-language violations, forcing a locale/language without user choice is reportable unless clearly justified as region-specific.
No suspicious patterns detected.