Security checks across malware telemetry and agentic risk
This video-generation skill is mostly purpose-aligned, but it needs review because it uses sensitive credentials, sends content to external AI/TTS services, mutates local project files, and includes an exposed fallback API key and unsafe dependency declarations.
Install only if you are comfortable sending prompts, outlines, narration, and TTS text to third-party services and running it inside a dedicated Remotion project. Review and remove the hardcoded DashScope fallback key, pin or clean dependencies, use your own credential file, and keep the project under version control so Root.tsx and generated files can be reviewed or reverted.
print(f" CMD: {' '.join(cmd)}")
t0 = time.time()
# shell=True needed on Windows so npx.cmd can be found
result = subprocess.run(' '.join(cmd), cwd=str(PROJECT_DIR), shell=True)
elapsed = time.time() - t0
if result.returncode != 0:# Python dependencies for video pipeline edge-tts>=6.0.0 requests>=2.25.0 dashscope>=1.13.0 mutagen>=1.45.0
# Python dependencies for video pipeline edge-tts>=6.0.0 requests>=2.25.0 dashscope>=1.13.0 mutagen>=1.45.0 asyncio
# Python dependencies for video pipeline edge-tts>=6.0.0 requests>=2.25.0 dashscope>=1.13.0 mutagen>=1.45.0 asyncio pathlib
edge-tts>=6.0.0 requests>=2.25.0 dashscope>=1.13.0 mutagen>=1.45.0 asyncio pathlib argparse
VirusTotal findings are pending for this skill version.