Security audit
Security checks for vulnerabilities and agentic risk
This video transcription skill needs review because its stated network restrictions do not match how it uploads videos.
Before uploading private recordings, clarify the service's storage destinations and retention terms. The client does not enforce its advertised single-domain boundary or establish the server-side deletion and no-training promises. Usage requires a paid GuaiKei token, and downloaded media remains locally until later cleanup.
令牌校验本身可以是视频处理服务的辅助实现，但此代码还加入了未披露的第三方令牌解锁与推广流程，并非单纯验证声明中千问服务的凭据。判断不基于该辅助模块没有视频处理逻辑，而基于其额外的第三方使用门槛及营销行为。此代码片段没有展示网络请求、令牌外传或付费操作；所谓“技能已暂停”仅体现在提示和返回空字符串中。
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
4. 同时传入文件路径与任务ID，优先执行 `--id`，忽略 `--file`
5. 无自定义 prompt 时，默认完整转录视频全部文字
| 用户自然语言指令 | 自动生成命令 |
| -------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
| 视频提取 https://example.com/video.mp4 中的文字 | `node scripts/video2text/index.js --file "https://example.com/video.mp4"` |
| 把本地 /path/to/your/video.mp4 改成小红书风格的文案 | `node scripts/video2text/index.js --file "/path/to/your/video.mp4" --prompt "改写成小红书风格的文案"` |
Without declared permissions the skill's intent is opaque and cannot be validated.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
当用户用自然语言下达指令时，按以下映射生成命令，保证识别与执行一致：
| 用户自然语言指令 | 生成的命令 |
| ---------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
| 提取 https://example.com/video.mp4 里的文字 | `node scripts/video2text/index.js --file "https://example.com/video.mp4"` |
| 总结这个视频的核心观点 https://example.com/video.mp4 | `node scripts/video2text/index.js --file "https://example.com/video.mp4" --prompt "总结这个视频的核心观点"` |
Deleting a newly created partial download is normal cleanup, but this implementation does not distinguish newly created files from pre-existing files supplied through resumeFromFile(). With removeOnFail and removeOnStop enabled by default, a failed or cancelled resumed download can delete the entire pre-existing file rather than just discard the newly downloaded data. In this video-processing skill, that creates a conditional risk of losing existing media or partial downloads; there is no evidence of malicious intent.