Security audit
Security checks across malware telemetry and agentic risk
This skill performs the advertised Douyin video report workflow, but it also bypasses platform checks, runs URL-influenced shell commands, and processes or shares media without enough user control.
Review before installing. Use only in an isolated environment and only with videos you have permission to process. Assume downloaded video, extracted audio, screenshots, transcripts, and reports may remain on disk or be handled by external CLI services; prefer a revised version with explicit consent prompts, narrow triggers, Douyin URL validation, safe subprocess argument lists, scoped permissions, and cleanup controls.
WORKSPACE = "/home/gem/workspace/agent/workspace"
def run(cmd, timeout=60):
r = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=timeout)
return r.returncode, r.stdout, r.stderr
async def get_video_info(url):65/65 vendors flagged this skill as clean.
No suspicious patterns detected.