Video Editor - 视频剪辑

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:43 PM UTC
• Version:
  1.0.0

Overview

This is a local video-editing skill that edits user-supplied media files and does not show hidden networking, credential access, persistence, or destructive behavior.

Install with normal caution for a local media tool. Use it only when you intend to process video/audio files, review output filenames before running commands, and avoid giving it sensitive media unless you are comfortable with local derived copies being written.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The trigger phrases are broad generic terms like '加文字', '变速', and '视频处理', which can match many normal user requests and cause the skill to activate unexpectedly. Over-broad invocation increases the chance of unintended file operations on local media and can route unrelated conversations into a tool with write-capable media-processing behavior.

VirusTotal

64/64 vendors flagged this skill as clean.