Security audit
Skill Video Caption Overlay
Security checks across malware telemetry and agentic risk
Overview
This is a local video captioning helper with a portability issue in its default font paths, but no evidence of hidden data access, persistence, exfiltration, or destructive behavior.
Before installing, understand that this runs a local Python media-rendering script and may fetch MoviePy and Pillow through `uv`. Provide explicit font paths if the default `/home/aladdin/...` fonts are not present, and consider pinning dependencies for repeatable or production use.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.