Security audit
Security checks for vulnerabilities and agentic risk
This local subtitle tool needs review because its report options can overwrite the original file despite its preservation promise.
Keep a backup and use distinct, unused paths for the repaired subtitle and both reports, avoiding links to existing files. Prefer a version that validates every output path before writing. The scanner's partial-coverage exception was resolved by inspecting the output filename example and bundled code; the confirmed concern is accidental data loss.
Without declared permissions the skill's intent is opaque and cannot be validated.
The fix command opens --log and --todo paths in write mode without checking whether they identify the input subtitle, so either option can truncate the original and replace it with JSON. This contradicts the explicit preservation guarantee and can cause data loss through mistaken or adversarially supplied arguments; the recommended temporary-report workflow reduces exposure but does not enforce protection.
