将 Markdown 技术文档自动转换成带配音旁白的专业视频

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Markdown-to-video skill, with the main caveat that narration text may be processed by edge-tts outside the local machine.

Install only if you are comfortable with the listed media dependencies and with narration text being handled by edge-tts. Use a dedicated project folder, review output paths before running FFmpeg commands, and avoid confidential Markdown unless your organization allows that TTS service.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The workflow sends document-derived narration text to edge-tts, which implies transmitting user content to an external network service, but the skill gives no privacy notice, consent step, or data-handling guidance. If users process sensitive internal documents, proprietary text could be exposed to third-party infrastructure unexpectedly.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal