Security audit
Security checks for vulnerabilities and agentic risk
A video link could redirect this skill to private network data, which it would then automatically upload to its cloud service.
Until URL destinations and redirects are restricted, prefer explicitly selected local files or an isolated environment that blocks private network access. Submitted media goes to provider-selected storage and may incur fees. Verify upload destinations and retention terms before sharing confidential recordings; the client cannot establish the advertised cloud deletion guarantees.
scripts/utils/download.jsPublic video redirects can access private HTTP resources and upload their responses
The attacker can cause unauthorized GET requests to internal services. If an internal endpoint returns confidential content without additional authentication, that content is downloaded and automatically transmitted to the cloud transcription upload destination.
Token 校验本身可以是正常的辅助实现，但此代码还将技能可用性与未声明的第三方私有 token 关联，并通过营销文案引导用户前往 www.guaikei.com 或联系客服。这些行为超出了所声明的视频转写与文案生成用途。该片段没有执行网络请求、传输 token 或实际终止程序；所谓技能暂停仅体现为提示及返回空字符串。
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
4. 同时传入文件路径与任务ID，优先执行 `--id`，忽略 `--file`
5. 无自定义 prompt 时，默认完整转录视频全部文字
| 用户自然语言指令 | 自动生成命令 |
| -------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
| 视频提取 https://example.com/video.mp4 中的文字 | `node scripts/video2text/index.js --file "https://example.com/video.mp4"` |
| 把本地 /path/to/your/video.mp4 改成小红书风格的文案 | `node scripts/video2text/index.js --file "/path/to/your/video.mp4" --prompt "改写成小红书风格的文案"` |
Without declared permissions the skill's intent is opaque and cannot be validated.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
当用户用自然语言下达指令时，按以下映射生成命令，保证识别与执行一致：
| 用户自然语言指令 | 生成的命令 |
| ---------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
| 提取 https://example.com/video.mp4 里的文字 | `node scripts/video2text/index.js --file "https://example.com/video.mp4"` |
| 总结这个视频的核心观点 https://example.com/video.mp4 | `node scripts/video2text/index.js --file "https://example.com/video.mp4" --prompt "总结这个视频的核心观点"` |
The stop path deletes the destination with fs.unlink, and failure cleanup does the same at L1047–L1058; both removal options default to true at L0044–L0045. No comment, confirmation, or user-facing message discloses the deletion, which can also affect an existing file supplied to resumeFromFile.