Ai Subtitle Generator Tiktok

• Analyzed: Apr 11, 2026, 5:06 PM
• Findings: 1
• Version: 1.0.0
• Hash: b8a72795bd72f1f4a2786d038a5aac9bdd1b9a08d647f2d679ca9497e348de60
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructs the agent to interface with a remote API (mega-api-prod.nemovideo.ai) for video processing and includes automated authentication via anonymous tokens. A significant security risk is identified in the SSE (Server-Sent Events) handling instructions in SKILL.md, which direct the agent to 'internally process' tool calls received from the remote server. This design creates a Remote Code Execution (RCE) vector where the third-party service could potentially execute any of the agent's local tools without user intervention. While this architecture supports the stated goal of cloud-based video editing, the remote control capability is a high-risk design pattern.