AI视频去字幕 | 消除字幕 | 去除字幕 | 视频无字幕 | 青虎AI

• Outcome: Pass
• Latest audit: Oct 16, 2026 · 5:27 AM UTC
• Version: 0.1.1

Overview

This skill is a coherent video subtitle-removal integration, but users should understand it may install qhkit/Node tooling and upload videos to the Qinghu service.

Install only if you are comfortable letting the agent install or upgrade qhkit/Node tooling, configure a Qinghu API token, and upload the selected video files to the service for processing. Prefer reviewing install commands first and avoid processing sensitive videos unless the service is acceptable for that content.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The skill instructs the agent to install software globally, download and unpack runtimes, and alter configuration/environment state in order to complete a task, but the skill description does not clearly warn that it may modify the host environment. In an agent setting, this can cause unreviewed system changes, dependency drift, and accidental execution of network-fetched tooling on the user's machine.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 84% confidence

Finding

This duplicate finding refers to the same persistence behavior: writing a downloaded runtime under the user's home directory and exporting a modified PATH. In the context of an agent skill, such stateful environment modification is security-relevant because it alters future command resolution and leaves software installed after the task ends.

Content

Scanner excerpt · SKILL.md (reported line 49)May include surrounding context.

Linux 二进制安装（装到用户目录，无需 root；先校验官方 SHA256 再解包）：

cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"

text

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 84% confidence

Finding

This duplicate finding refers to the same persistence behavior: writing a downloaded runtime under the user's home directory and exporting a modified PATH. In the context of an agent skill, such stateful environment modification is security-relevant because it alters future command resolution and leaves software installed after the task ends.

Content

Scanner excerpt · SKILL.md (reported line 49)May include surrounding context.

Linux 二进制安装(装到用户目录,无需 root;先校验官方 SHA256 再解包):

cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"

text