Security audit

ChatCut口播 · 马甲实战版

Security checks across malware telemetry and agentic risk

Overview

This skill is a conservative ChatCut video-editing workflow with clear approval gates and no evidence of hidden export, publishing, or data exfiltration.

Install this if you want ChatCut workflow orchestration and are comfortable with it reading the active ChatCut project and storing local run state. Review representative samples before whole-video changes, keep private terms and project details out of public reports, and treat repository-maintenance push instructions as relevant only when intentionally developing the skill itself.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/doctor.mjs:122

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/asset-validation.test.mjs:10

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/capability-profile.test.mjs:118

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/caption-validator.test.mjs:164

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/distribution-pack.test.mjs:81

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/explainable-planner.test.mjs:130

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/extensions.test.mjs:10

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/feedback-governance.test.mjs:173

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/koubo-cli.test.mjs:16

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/media-release-audit.test.mjs:118

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/plan-bundle.test.mjs:211

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/preview-approval.test.mjs:174

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/profile-resolver.test.mjs:389

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/public-safety.test.mjs:25

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/repository-consistency.test.mjs:78

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/rule-registry.test.mjs:30

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/runtime-contracts.test.mjs:29

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/schema-validation.test.mjs:32

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/srt-bridge.test.mjs:194

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/visual-decision-plan.test.mjs:31