Security audit
Security checks across malware telemetry and agentic risk
The skill is mostly a real Douyin/video transcription tool, but it can send audio to remote ASR services by default and automatically stores transcript snippets without clear consent or retention controls.
Review before installing, especially for private, confidential, copyrighted, or regulated audio/video. Use it only if you accept that transcription may use remote qwen-asr or Tencent Cloud and that transcript snippets may be saved into a local memory store. Prefer a clearly local Whisper-only configuration and disable or remove memory-manager writes unless the publisher adds explicit consent, retention, and deletion controls.
def memory_add(content, cat='knowledge'):
try:
subprocess.run(
['python3', MEMORY_CORE, 'add', content[:200], cat],
capture_output=True, text=True, timeout=5,
)faster-whisper>=1.0.0 ffmpeg-python>=0.2.0 edge-tts>=6.1.0 requests>=2.31.0
faster-whisper>=1.0.0 ffmpeg-python>=0.2.0 edge-tts>=6.1.0 requests>=2.31.0
faster-whisper>=1.0.0 ffmpeg-python>=0.2.0 edge-tts>=6.1.0 requests>=2.31.0
faster-whisper>=1.0.0 ffmpeg-python>=0.2.0 edge-tts>=6.1.0 requests>=2.31.0
67/67 vendors flagged this skill as clean.
No suspicious patterns detected.