Security audit
Security checks across malware telemetry and agentic risk
This is a coherent book-video generation skill with expected web/API and local media-processing behavior, though users should review its external services and automatic dependency installation.
Install only if you are comfortable with a workflow that contacts search, TTS, and image-generation services and writes generated media locally. Preinstall dependencies yourself where possible, review which API keys and endpoints you set, and avoid pointing SD_WEBUI_URL at untrusted or sensitive internal services.
f.write(f"file '{cf}'\n")
no_subs = os.path.join(tmpdir, "no_subs.mp4")
subprocess.run(
[FFMPEG, "-y", "-f", "concat", "-safe", "0", "-i", concat_list,
"-c", "copy", no_subs],
capture_output=True, check=True,f"Alignment=2,MarginV=30"
)
subprocess.run(
[FFMPEG, "-y", "-i", no_subs, "-vf",
f"subtitles='{ass_escaped}':force_style='{style}'",
"-c:a", "copy", output_path],import edge_tts
except ImportError:
print("正在安装 edge-tts...")
os.system(f"{sys.executable} -m pip install edge-tts -q")
import edge_tts
os.makedirs(os.path.dirname(output_path) or ".", exist_ok=True)import volcenginesdkcore
import volcenginesdkvisualapi
except ImportError:
os.system(f"{sys.executable} -m pip install volcenginesdkcore volcenginesdkvisualapi -q")
import volcenginesdkcore
import volcenginesdkvisualapi}).encode()
req = urllib.request.Request(url, data=data, headers={"Content-Type": "application/json"}, method="POST")
with urllib.request.urlopen(req) as resp:
result = json.loads(resp.read())
image_data = base64.b64decode(result["images"][0])return name
try:
result = subprocess.run(
["fc-list", ":lang=zh", "family"],
capture_output=True, text=True, timeout=5,
)f"Alignment=2,MarginV=30"
)
subprocess.run(
[FFMPEG, "-y", "-i", no_subs, "-vf",
f"subtitles='{ass_escaped}':force_style='{style}'",
"-c:a", "copy", output_path],65/65 vendors flagged this skill as clean.
No suspicious patterns detected.