Security audit
Security checks across malware telemetry and agentic risk
This appears to be a legitimate ShortVideo integration, but it uploads selected media to an external service and can use account credits.
Install only if you trust the ShortVideo provider and publisher. Keep the API key private, verify SHORTVIDEO_BASE_URL is the intended ShortVideo API host, and only provide files, URLs, and prompts you are comfortable sending to the service, especially for non-public or regulated media.
"""
try:
print(f" Downloading from URL: {url}")
response = requests.get(url, timeout=timeout, stream=True)
response.raise_for_status()
# Check content type}
try:
response = requests.post(url, json=payload, headers=headers, timeout=30)
response.raise_for_status()
result = response.json()headers = {"Authorization": f"Bearer {api_key}"}
try:
response = requests.get(url, headers=headers, timeout=30)
response.raise_for_status()
result = response.json()with open(filepath, "rb") as f:
files = {"file": (filename, f)}
data = {"type": upload_type}
response = requests.post(url, files=files, data=data, headers=headers, timeout=60)
response.raise_for_status()
result = response.json()with open(filepath, "rb") as f:
files = {"file": (filename, f)}
data = {"type": upload_type}
response = requests.post(url, files=files, data=data, headers=headers, timeout=60)
response.raise_for_status()
result = response.json()headers = {"Authorization": f"Bearer {api_key}"}
try:
response = requests.get(url, headers=headers, timeout=30)
response.raise_for_status()
result = response.json()"""
try:
print(f" Downloading from URL: {url}")
response = requests.get(url, timeout=timeout, stream=True)
response.raise_for_status()
# Check file size66/66 vendors flagged this skill as clean.
No suspicious patterns detected.