Security audit
Security checks for vulnerabilities and agentic risk
This skill sends user-provided video links to LinkDigest for transcription and summarization, and the network/API-key behavior is disclosed and aligned with that purpose.
Install this if you are comfortable sending submitted links and the API key, when configured, to linkdigest.dev for processing and caching. Avoid submitting private links or sensitive material, and prefer the bundled Python script or direct HTTPS API over the optional unpinned npx MCP bridge unless you independently trust and pin that dependency.
The skill is presented as a Douyin-focused transcription helper, but the content documents materially broader capabilities: multi-platform ingestion, translation, breakdown analysis, partial/long-video modes, and job retrieval workflows. This mismatch undermines informed consent and policy scoping, making it easier for users or host systems to approve behavior they did not intend to authorize.
The skill advertises executable behavior that uses environment variables, shell commands, and network access, but it does not declare a restrictive tool scope such as permissions or allowed-tools. This creates an overbroad execution surface where a host agent may permit more capabilities than users expect, increasing the risk of secret exposure or unintended command/network execution.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -sS -X POST https://linkdigest.dev/api/v1/digest \
-H "Authorization: Bearer $LINKDIGEST_API_KEY" \
-H "Content-Type: application/json" \
-d '{"url": "https://v.douyin.com/<短链>/", "format": "json"}'
The documentation tells users to run npx mcp-remote without pinning an exact package version or integrity. Because npx resolves and executes code from the package registry at runtime, a compromised package, typosquat, or malicious update could lead to arbitrary code execution on the user's machine.
No suspicious patterns detected.