Security checks across malware telemetry and agentic risk
This video-remix skill broadly does what it claims, but it needs review because it can automatically use logged-in browser sessions, send video-derived content to external AI/TTS services, install system tools, and expose generated files on the local network.
Install only if you are comfortable with the agent using a browser profile that may already be signed in, sending URLs and generated text to external AI/TTS services, installing media tools, downloading third-party video content, and serving the output directory to devices on your local network. Use an isolated environment, avoid sensitive or private videos, confirm you have rights to reuse the source media, and stop or disable the HTTP server when finished.
output_dir.mkdir(parents=True, exist_ok=True)
def run_server():
subprocess.run(
[sys.executable, "-m", "http.server", str(port)],
cwd=str(output_dir),
capture_output=Falsestr(merged_video)
]
subprocess.run(cmd, capture_output=True, check=True)
print(f"✅ 合并完成：{merged_video}")
return merged_videostr(full_audio)
]
subprocess.run(cmd, capture_output=True, check=True)
print(f"✅ 配音合并完成：{full_audio}")
return full_audiostr(output_path)
]
subprocess.run(cmd, capture_output=True, check=True)
# 获取输出文件信息
result = subprocess.run(str(output_file)
]
subprocess.run(cmd, capture_output=True, check=True)
clip_files.append(output_file)
# 合并片段# 0.3 平台依赖（Ubuntu/Debian） if command -v apt >/dev/null 2>&1; then sudo apt update -y sudo apt install -y ffmpeg yt-dlp libass-dev fi
# 0.3 平台依赖（Ubuntu/Debian） if command -v apt >/dev/null 2>&1; then sudo apt update -y sudo apt install -y ffmpeg yt-dlp libass-dev fi # 0.4 Python 依赖（幂等安装）
66/66 vendors flagged this skill as clean.