Security audit
Security checks for vulnerabilities and agentic risk
This video-editing skill is purpose-aligned, but it can overwrite local files and has insufficient safeguards around user media, transcripts, and subtitle rendering inputs.
Review output paths carefully before running this skill, avoid using it on sensitive meetings or private videos unless you are comfortable with transcripts and edit files being written locally, and do not process untrusted subtitle filenames or style files. Prefer using a separate output directory and keep backups of important files because existing outputs may be overwritten.
"-c:a", "aac",
output
]
result = subprocess.run(cmd, capture_output=True, text=True)
if result.returncode != 0 and "Unable to parse option" in result.stderr:
# fallback: 简化滤镜
cmd = ["-c:a", "aac",
output
]
result = subprocess.run(cmd, capture_output=True, text=True)
return result.returncode == 0
if __name__ == "__main__":No suspicious patterns detected.