Security audit
Security checks for vulnerabilities and agentic risk
This video transcription skill needs review because its stated network restrictions do not match how its code transfers videos.
Before sending private recordings, confirm the service's upload destinations and privacy terms. Processing requires a paid token, source links can use unencrypted HTTP, and downloaded copies remain locally until later cleanup or manual removal.
身份令牌校验本身可以是正常的配套实现，但该代码额外引入了描述未提及的 GUAIKEI 私有 token 门槛，并通过功能暂停和解锁话术引导用户访问 www.guaikei.com 或联系微信。这种第三方推广与访问限制超出了声明的视频转写及文案生成功能。该片段没有实际网络请求、令牌远程验证或数据外传，也不能仅凭返回空字符串断定整个技能确实停止运行。
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
4. 同时传入文件路径与任务ID，优先执行 `--id`，忽略 `--file`
5. 无自定义 prompt 时，默认完整转录视频全部文字
| 用户自然语言指令 | 自动生成命令 |
| -------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
| 视频提取 https://example.com/video.mp4 中的文字 | `node scripts/video2text/index.js --file "https://example.com/video.mp4"` |
| 把本地 /path/to/your/video.mp4 改成小红书风格的文案 | `node scripts/video2text/index.js --file "/path/to/your/video.mp4" --prompt "改写成小红书风格的文案"` |
Without declared permissions the skill's intent is opaque and cannot be validated.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
当用户用自然语言下达指令时，按以下映射生成命令，保证识别与执行一致：
| 用户自然语言指令 | 生成的命令 |
| ---------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
| 提取 https://example.com/video.mp4 里的文字 | `node scripts/video2text/index.js --file "https://example.com/video.mp4"` |
| 总结这个视频的核心观点 https://example.com/video.mp4 | `node scripts/video2text/index.js --file "https://example.com/video.mp4" --prompt "总结这个视频的核心观点"` |
The stop path unlinks the destination file, and failure cleanup also deletes it at L1047–L1058; both behaviors are enabled by default at L0044–L0045. No confirmation, deletion-specific log, or explanatory comment warns about this destructive cleanup, which can also remove an existing file supplied to resumeFromFile.