Security checks across malware telemetry and agentic risk
This is a coherent local video-editing skill, but it needs review because editable local preferences are inserted into shell commands and the documented learning opt-out is not enforced.
Install only if you are comfortable running a local media-processing Python script. Before use, inspect or recreate config/user_preferences.json yourself, do not import preference files from untrusted sources, confirm the hardcoded audio path and output filenames, and expect local preference/history data plus generated media files to be written under the skill directory.
"""运行命令并打印进度"""
if description:
print(f"🎬 {description}...")
result = subprocess.run(cmd, shell=True, capture_output=True, text=True)
if result.returncode != 0:
print(f"❌ 失败：{result.stderr}")
return False]
# 获取音频时长
result = subprocess.run(
f'ffprobe -v error -show_entries format=duration -of default=noprint_wrappers=1:nokey=1 "{AUDIO_FILE}"',
shell=True, capture_output=True, text=True
)# 显示文件信息
if OUTPUT_FILE.exists():
size = OUTPUT_FILE.stat().st_size / 1024 / 1024
result = subprocess.run(
f'ffprobe -v error -show_entries format=duration -of default=noprint_wrappers=1:nokey=1 "{OUTPUT_FILE}"',
shell=True, capture_output=True, text=True
)65/65 vendors flagged this skill as clean.