百度智能云VOD字幕擦除

• Analyzed: Apr 17, 2026, 5:56 AM
• Findings: 1
• Version: 1.0.2
• Hash: 8adb65a813fbf62b973b51457b6fc14b2df5d44dd0fd696e1ec049971dc5327c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate tool for interacting with Baidu Cloud's VOD subtitle removal service. The Python scripts (desubtitle.py and common.py) implement standard BCE v1 authentication and orchestrate video processing tasks, including file uploads and status polling. The SKILL.md file contains proactive safety instructions that force the AI agent to confirm parameters with the user before execution. While it interacts with the 'bdpan' CLI via subprocess, it does so using argument lists without shell=True, mitigating common injection risks. No malicious behavior, such as secret exfiltration or unauthorized remote execution, was detected.