Security checks across malware telemetry and agentic risk
The skill does what it advertises, but its normal video-generation path can run unsafe local shell commands from user-supplied text or paths.
Install only after reviewing or sandboxing the Python script. Avoid untrusted video topics, scripts, titles, subtitles, or output paths until shell command construction is fixed; use limited provider keys, keep OPENAI_BASE on a trusted host, and do not submit confidential content unless the selected AI provider is acceptable for that data.
def run_cmd(cmd, timeout=120):
"""运行命令，返回 (ok, stdout)"""
try:
r = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=timeout)
return r.returncode == 0, r.stdout.strip()
except subprocess.TimeoutExpired:
return False, "Timeout"# edge-tts 命令行
safe_text = text.replace('"', '\\"').replace("'", "\\'")
cmd = f'edge-tts --voice zh-CN-XiaoxiaoNeural --text "{safe_text}" --write-media "{output_path}"'
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=60)
if result.returncode == 0 and Path(output_path).exists():
size_kb = Path(output_path).stat().st_size / 1024
log(f" 🔊 Edge TTS: {Path(output_path).name} ({size_kb:.0f}KB)")for attempt in range(retries + 1):
try:
resp = requests.post(
f"{OPENAI_BASE}/images/generations",
headers={
"Authorization": f"Bearer {OPENAI_API_KEY}",for attempt in range(retries + 1):
try:
resp = requests.post(
f"{OPENAI_BASE}/audio/speech",
headers={
"Authorization": f"Bearer {OPENAI_API_KEY}",data = resp.json()
if data.get("base_resp", {}).get("status_code") == 0:
img_url = data["data"]["image_urls"][0]
img_resp = requests.get(img_url, timeout=30)
if img_resp.status_code == 200:
with open(output_path, "wb") as f:
f.write(img_resp.content)data = resp.json()
if "data" in data and data["data"][0].get("url"):
img_url = data["data"][0]["url"]
img_resp = requests.get(img_url, timeout=30)
if img_resp.status_code == 200:
with open(output_path, "wb") as f:
f.write(img_resp.content)data = resp.json()
if data.get("base_resp", {}).get("status_code") == 0:
audio_url = data["data"]["audio_url"]
audio_resp = requests.get(audio_url, timeout=30)
if audio_resp.status_code == 200:
with open(output_path, "wb") as f:
f.write(audio_resp.content)66/66 vendors flagged this skill as clean.