Security audit
Security checks for vulnerabilities and agentic risk
This skill is mostly a coherent video-upload helper, but it can upload local videos publicly to a third-party service and its trigger scope is broader than its actual upload-only purpose.
Install only if you are comfortable sending selected video files and stream API credentials to the named third-party API. Before use, confirm each upload, avoid private or sensitive videos unless public hosting is intended, and do not use this skill for general audio editing, media conversion, or dubbing tasks despite its broad trigger text.
The skill’s primary description does not prominently warn that local video files are transmitted to a third-party service and that uploaded videos are public by default. This creates a significant risk of inadvertent disclosure of sensitive or private content because users may interpret the skill as a local processing utility rather than external publication.
清单中明确写明“视频管理：列表/删除/更新 | 不支持”，且免费版定位为仅上传并获取播放链接。但后文的 API Key 验证示例实际调用 /api/videos 并提交 {"limit": 1}，这属于视频列表查询/管理能力的一部分，超出了前述免费版声明范围。
This command sends user-provided metadata and authentication headers to an external domain. External transmission is expected for an upload skill, but it remains security-relevant because it involves third-party network egress and secret handling; combined with weak disclosure, users may unknowingly send content and credentials off-platform.
# Step 1: 创建视频对象
curl -s -X POST 'https://api-w3stream.attoaioz.cyou/api/videos/create' \
-H 'stream-public-key: PUBLIC_KEY' \
-H 'stream-secret-key: SECRET_KEY' \
-H 'Content-Type: application/json' \
This step transmits the actual local video file, along with authentication headers and file-derived metadata, to an external service. In the context of a skill that may be triggered broadly and does not prominently disclose public-by-default hosting, the risk is elevated because private local content could be uploaded and exposed unintentionally.
END_POS=$((FILE_SIZE - 1))
HASH=$(md5sum /videos/python-tutorial.mp4 | awk '{print $1}')
curl -s -X POST "https://api-w3stream.attoaioz.cyou/api/videos/VIDEO_ID/part" \
-H 'stream-public-key: PUBLIC_KEY' \
-H 'stream-secret-key: SECRET_KEY' \
-H "Content-Range: bytes 0-$END_POS/$FILE_SIZE" \
“不适用场景”明确表示该技能不适合处理实时直播推流、专业影视后期等视频上传之外场景，但紧接着“触发条件”却写成“需要视频处理、音频编辑、媒体转换、配音生成时使用”。后者明显扩大到音频编辑、媒体转换、配音生成，与全文实际仅描述视频上传/查询链接的行为相矛盾。
The trigger condition is overly broad, covering general video/audio/media tasks that exceed the skill’s actual purpose. In an agent ecosystem, this can cause the skill to activate for unrelated user requests and initiate uploads or credential collection in contexts where the user did not intend third-party transmission.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
brew install jq
# Ubuntu / Debian 安装 jq
sudo apt install jq
# 验证安装
curl --version
The verification example instructs users to place API secrets in environment variables and send them to the external service, which is normal operationally but still sensitive. The risk lies in normalizing broad secret use and external credential transmission without stronger guidance on secret storage, shell history exposure, and least-privilege handling.
export STREAM_SECRET_KEY="your_secret_key"
# 验证配置
curl -s 'https://api-w3stream.attoaioz.cyou/api/videos' \
-X POST \
-H "stream-public-key: $STREAM_PUBLIC_KEY" \
-H "stream-secret-key: $STREAM_SECRET_KEY" \