{"data":{"skill":{"slug":"volcengine-byted-mediakit-image","name":"byted-mediakit-image","icon":"📦","repo":"https://github.com/volcengine/mediakit-cli/tree/120059a6c4a089fb580edd24d8ecf93d687e3c96/skills/byted-mediakit-image","status":"approved","author":"volcengine","authorVersion":"0.2.1","skillstoreRevision":1},"audit":{"id":"26492f7e-8a4d-4d20-b591-3605ada90285","skill_id":"1031a102-d86c-4b3a-8bdb-22da48fb0eaf","version":1,"content_hash":"v3:5526951beaeca22519572a471618555839b53b05:54378b912e1336e1cb0f8aa21214eb90c5d89b19ecf4804b522d7d4ec1e91d7d:173e2cd8bc450f5673a67b4211a8be5ffcb0ed7eb7afc1e588d9b842dd94c8a5:736b696c6c732f766f6c63656e67696e652f62797465642d6d656469616b69742d696d616765:24c844d8498e5f9efd259bc38bac973e","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 53 static findings are false positives. The flagged path sequences are documentation links, the backtick matches are Markdown formatting around documented commands, and entropy heuristics reflect localized Markdown text; no prompt injection or malicious payload evidence was found.","remediation":[{"issue":"The skill requires shell access to call the MediaKit CLI.","severity":"medium","suggestion":"Keep the executable fixed to mediakit-cli, pass arguments as structured values, and validate user-provided input paths before execution."},{"issue":"Relative reference links trigger path-traversal heuristics.","severity":"low","suggestion":"Keep relative links documentation-only and apply canonicalization plus an allowed-root check if reference paths are ever resolved by code."},{"issue":"Localized Markdown files trigger entropy heuristics.","severity":"low","suggestion":"Keep reference content as plain UTF-8 Markdown and avoid embedding encoded or binary payloads in documentation files."}],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"reference/families/image-size-reduction.md","line_end":9,"line_start":9},{"file":"reference/families/image-size-reduction.md","line_end":10,"line_start":10},{"file":"SKILL.md","line_end":20,"line_start":20}]},{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":21,"line_start":21},{"file":"SKILL.md","line_end":22,"line_start":22},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":38,"line_start":38},{"file":"SKILL.md","line_end":39,"line_start":39},{"file":"SKILL.md","line_end":40,"line_start":40},{"file":"SKILL.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":42,"line_start":42},{"file":"SKILL.md","line_end":43,"line_start":43},{"file":"SKILL.md","line_end":44,"line_start":44},{"file":"SKILL.md","line_end":45,"line_start":45},{"file":"SKILL.md","line_end":46,"line_start":46},{"file":"SKILL.md","line_end":47,"line_start":47},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":49,"line_start":49},{"file":"SKILL.md","line_end":50,"line_start":50},{"file":"SKILL.md","line_end":51,"line_start":51},{"file":"SKILL.md","line_end":52,"line_start":52},{"file":"SKILL.md","line_end":53,"line_start":53},{"file":"SKILL.md","line_end":54,"line_start":54},{"file":"SKILL.md","line_end":55,"line_start":55},{"file":"SKILL.md","line_end":56,"line_start":56},{"file":"SKILL.md","line_end":57,"line_start":57},{"file":"SKILL.md","line_end":58,"line_start":58}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":24,"total_lines":1430,"audit_model":"codex","audited_at":"2026-09-12T11:54:31.357+00:00","created_at":"2026-09-14T00:42:36.76293+00:00","static_findings":[{"id":"filesystem:reference/families/image-size-reduction.md:9:path-traversal-sequence","file":"reference/families/image-size-reduction.md","pattern":"Path traversal sequence","snippet":"- [slim-image](../slim-image.md):用户强调尽量不掉画质、质量优先或高质量缩小体积,且未要求精确体积上限或质量值时优先选择;默认保持原格式,并通过 AI 修复毛刺、彩噪和","category":"filesystem","line_end":9,"severity":"high","line_start":9},{"id":"filesystem:reference/families/image-size-reduction.md:10:path-traversal-sequence","file":"reference/families/image-size-reduction.md","pattern":"Path traversal sequence","snippet":"- [compress-image](../compress-image.md):用户明确给出 quality、max_size 或 output_format,要求格式转换,或明确接受 PNG 有损","category":"filesystem","line_end":10,"severity":"high","line_start":10},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. 先读取 `../byted-mediakit-shared/SKILL.md`,执行统一前置检查;该 Skill 缺失时停止并提示安装。","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:21:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. 只从下表选择 `image` 域工具;相似能力按各工具“能力描述”和参数边界区分。","category":"external_commands","line_end":21,"severity":"medium","line_start":21},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. 执行前按需读取对应 reference;参数与结果说明来自同一份已审核文案,完整机器合同以当前 CLI `--schema` 为准。","category":"external_commands","line_end":22,"severity":"medium","line_start":22},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"5. 执行时设置 `MEDIAKIT_SURFACE=skill`,指定调用来源是 Skill。","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"6. 执行时把 `MEDIAKIT_RUNTIME` 设置为当前 Agent 宿主,避免 CLI 无法可靠识别父级 Agent。","category":"external_commands","line_end":25,"severity":"medium","line_start":25},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| add-image-watermark | 为图片添加图文明水印,适用于版权标识与素材分发防盗链场景。 | Cloud | `mediakit-cli image add-image-waterm","category":"external_commands","line_end":38,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| adjust-image-color | 对输入图像的亮度、对比度和饱和度进行调整,支持调亮、调暗、增强对比度、减弱对比度、增强饱和度、减弱饱和度共 6 种快速调整效果。适用于素材基础优化、统一内","category":"external_commands","line_end":39,"severity":"medium","line_start":39},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| compress-image | 有损图像压缩与格式转换工具;用户明确给出 quality、max_size、output_format、要求格式转换,或明确接受 PNG 有损压缩时选择。若用户强","category":"external_commands","line_end":40,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| crop-image | 对输入图像进行多模式裁剪,可执行方向裁剪、定向裁剪、自定义裁剪或内切圆裁剪,适用于多端尺寸适配、主体保留、商品图去边和指定区域截取。 | Cloud | `mediaki","category":"external_commands","line_end":41,"severity":"medium","line_start":41},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| enhance-image | 基于图像内容理解进行智能决策,提升图片的分辨率、清晰度与色彩表现。 | Cloud | `mediakit-cli image enhance-image` | [","category":"external_commands","line_end":42,"severity":"medium","line_start":42},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| erase-image | 可按不同场景控制自动检测并擦除图片中的文字或常见图标,擦除后的区域通过智能填充技术进行修复,修复后的区域与背景自然融合。 | Cloud | `mediakit-cli","category":"external_commands","line_end":43,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| evaluate-image-quality | 用于图像画质评估,对输入图片进行主客观画质和美学评分,适用于质量监控、低质图筛查、内容审核、推荐排序和训练数据清洗。 | Cloud | `med","category":"external_commands","line_end":44,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| face-blur-image | 自动检测图片中的所有人脸区域并进行马赛克处理,用于一键保护图片中的人脸隐私。支持社交平台内容审核、街景或监控画面脱敏、新闻媒体素材处理以及 AI 训练数据集脱敏","category":"external_commands","line_end":45,"severity":"medium","line_start":45},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| flip-image | 支持对单张图片执行水平或竖直翻转。 | Cloud | `mediakit-cli image flip-image` | [reference/flip-image.m","category":"external_commands","line_end":46,"severity":"medium","line_start":46},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| gaussian-blur-image | 用于图像高斯模糊;通过设定模糊强度快速对图片进行模糊处理,适用于隐私信息弱化、背景氛围化、生成预览图及封面背景等场景。 | Cloud | `media","category":"external_commands","line_end":47,"severity":"medium","line_start":47},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| image-ocr | 用于通用印刷体文字识别(OCR),识别图片中的简体中文和英文,并提供文本块位置坐标与置信度参考。 | Cloud | `mediakit-cli image image-o","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| invert-image | 用于图像负片,对输入图像执行负片(反相)效果,将图像的明暗关系与颜色映射为原图的相反效果,即明暗反转、色彩转为补色。 | Cloud | `mediakit-cli ","category":"external_commands","line_end":49,"severity":"medium","line_start":49},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| mosaic-image | 支持对整张图像或指定矩形区域进行马赛克打码,可调整像素格形状与大小。支持用于遮挡人脸、证件信息、车牌、聊天记录等敏感内容。 | Cloud | `mediakit-c","category":"external_commands","line_end":50,"severity":"medium","line_start":50},{"id":"external_commands:SKILL.md:51:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| probe-image-metadata | 支持查询 metadata、avghue、alpha、blurhash 四种图像信息。 | Cloud | `mediakit-cli image p","category":"external_commands","line_end":51,"severity":"medium","line_start":51},{"id":"external_commands:SKILL.md:52:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| remove-image-background | 自动识别并保留图像主体,移除背景后生成背景透明的图片,用于图像背景移除(抠图)。 | Cloud | `mediakit-cli image r","category":"external_commands","line_end":52,"severity":"medium","line_start":52},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| resize-image | 用于图像缩放,支持按指定宽高精确缩放,也可按长边、短边或等比模式缩放,适用于多端素材适配、封面与缩略图生成及批量图片预处理。 | Cloud | `mediakit-","category":"external_commands","line_end":53,"severity":"medium","line_start":53},{"id":"external_commands:SKILL.md:54:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| rotate-image | 通过设置旋转角度和旋转背景样式对图片进行旋转处理,适用于图片方向校正、创意编辑和批量图像处理。 | Cloud | `mediakit-cli image rotat","category":"external_commands","line_end":54,"severity":"medium","line_start":54},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| round-corner-image | 为图片四角快速添加正圆或椭圆圆角,适用于头像、卡片、电商主图等常见视觉编辑场景。 | Cloud | `mediakit-cli image round-","category":"external_commands","line_end":55,"severity":"medium","line_start":55},{"id":"external_commands:SKILL.md:56:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| sharpen-image | 用于图像锐化,通过对输入图像进行锐化处理,有效增强图像的边缘细节与整体清晰度。适用于电商素材优化、UGC 画质增强、封面海报二创等场景。 | Cloud | `me","category":"external_commands","line_end":56,"severity":"medium","line_start":56},{"id":"external_commands:SKILL.md:57:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| slim-image | 质量优先的图片瘦身工具;用户强调尽量不掉画质、质量优先或高质量缩小体积,且未要求精确体积上限、质量值或格式转换时优先选择。 | Cloud | `mediakit-cli","category":"external_commands","line_end":57,"severity":"medium","line_start":57},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| smart-crop-image | 自动识别图像中的主体人脸区域,并适配指定尺寸进行裁剪;支持普通人脸和动漫人脸场景。未识别到人脸时,可按预设的降级策略输出结果。 | Cloud | `medi","category":"external_commands","line_end":58,"severity":"medium","line_start":58},{"id":"filesystem:SKILL.md:20:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"1. 先读取 `../byted-mediakit-shared/SKILL.md`,执行统一前置检查;该 Skill 缺失时停止并提示安装。","category":"filesystem","line_end":20,"severity":"high","line_start":20},{"id":"obfuscation:reference/add-image-watermark.md:1:heuristic-high-file-entropy-6-40-bits-possible-b","file":"reference/add-image-watermark.md","pattern":"[HEURISTIC] High file entropy (6.40 bits) - possible binary/encrypted content","snippet":"File: reference/add-image-watermark.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/adjust-image-color.md:1:heuristic-high-file-entropy-6-68-bits-possible-b","file":"reference/adjust-image-color.md","pattern":"[HEURISTIC] High file entropy (6.68 bits) - possible binary/encrypted content","snippet":"File: reference/adjust-image-color.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/compress-image.md:1:heuristic-high-file-entropy-6-95-bits-possible-b","file":"reference/compress-image.md","pattern":"[HEURISTIC] High file entropy (6.95 bits) - possible binary/encrypted content","snippet":"File: reference/compress-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/crop-image.md:1:heuristic-high-file-entropy-6-40-bits-possible-b","file":"reference/crop-image.md","pattern":"[HEURISTIC] High file entropy (6.40 bits) - possible binary/encrypted content","snippet":"File: reference/crop-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/enhance-image.md:1:heuristic-high-file-entropy-6-62-bits-possible-b","file":"reference/enhance-image.md","pattern":"[HEURISTIC] High file entropy (6.62 bits) - possible binary/encrypted content","snippet":"File: reference/enhance-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/erase-image.md:1:heuristic-high-file-entropy-6-55-bits-possible-b","file":"reference/erase-image.md","pattern":"[HEURISTIC] High file entropy (6.55 bits) - possible binary/encrypted content","snippet":"File: reference/erase-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/evaluate-image-quality.md:1:heuristic-high-file-entropy-6-77-bits-possible-b","file":"reference/evaluate-image-quality.md","pattern":"[HEURISTIC] High file entropy (6.77 bits) - possible binary/encrypted content","snippet":"File: reference/evaluate-image-quality.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/face-blur-image.md:1:heuristic-high-file-entropy-6-65-bits-possible-b","file":"reference/face-blur-image.md","pattern":"[HEURISTIC] High file entropy (6.65 bits) - possible binary/encrypted content","snippet":"File: reference/face-blur-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/families/image-size-reduction.md:1:heuristic-high-file-entropy-6-74-bits-possible-b","file":"reference/families/image-size-reduction.md","pattern":"[HEURISTIC] High file entropy (6.74 bits) - possible binary/encrypted content","snippet":"File: reference/families/image-size-reduction.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/flip-image.md:1:heuristic-high-file-entropy-6-59-bits-possible-b","file":"reference/flip-image.md","pattern":"[HEURISTIC] High file entropy (6.59 bits) - possible binary/encrypted content","snippet":"File: reference/flip-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/gaussian-blur-image.md:1:heuristic-high-file-entropy-6-68-bits-possible-b","file":"reference/gaussian-blur-image.md","pattern":"[HEURISTIC] High file entropy (6.68 bits) - possible binary/encrypted content","snippet":"File: reference/gaussian-blur-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/image-ocr.md:1:heuristic-high-file-entropy-6-78-bits-possible-b","file":"reference/image-ocr.md","pattern":"[HEURISTIC] High file entropy (6.78 bits) - possible binary/encrypted content","snippet":"File: reference/image-ocr.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/invert-image.md:1:heuristic-high-file-entropy-6-65-bits-possible-b","file":"reference/invert-image.md","pattern":"[HEURISTIC] High file entropy (6.65 bits) - possible binary/encrypted content","snippet":"File: reference/invert-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/mosaic-image.md:1:heuristic-high-file-entropy-6-62-bits-possible-b","file":"reference/mosaic-image.md","pattern":"[HEURISTIC] High file entropy (6.62 bits) - possible binary/encrypted content","snippet":"File: reference/mosaic-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/probe-image-metadata.md:1:heuristic-high-file-entropy-6-34-bits-possible-b","file":"reference/probe-image-metadata.md","pattern":"[HEURISTIC] High file entropy (6.34 bits) - possible binary/encrypted content","snippet":"File: reference/probe-image-metadata.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/remove-image-background.md:1:heuristic-high-file-entropy-6-57-bits-possible-b","file":"reference/remove-image-background.md","pattern":"[HEURISTIC] High file entropy (6.57 bits) - possible binary/encrypted content","snippet":"File: reference/remove-image-background.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/resize-image.md:1:heuristic-high-file-entropy-6-68-bits-possible-b","file":"reference/resize-image.md","pattern":"[HEURISTIC] High file entropy (6.68 bits) - possible binary/encrypted content","snippet":"File: reference/resize-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/rotate-image.md:1:heuristic-high-file-entropy-6-60-bits-possible-b","file":"reference/rotate-image.md","pattern":"[HEURISTIC] High file entropy (6.60 bits) - possible binary/encrypted content","snippet":"File: reference/rotate-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/round-corner-image.md:1:heuristic-high-file-entropy-6-57-bits-possible-b","file":"reference/round-corner-image.md","pattern":"[HEURISTIC] High file entropy (6.57 bits) - possible binary/encrypted content","snippet":"File: reference/round-corner-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/sharpen-image.md:1:heuristic-high-file-entropy-6-64-bits-possible-b","file":"reference/sharpen-image.md","pattern":"[HEURISTIC] High file entropy (6.64 bits) - possible binary/encrypted content","snippet":"File: reference/sharpen-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/slim-image.md:1:heuristic-high-file-entropy-7-00-bits-possible-b","file":"reference/slim-image.md","pattern":"[HEURISTIC] High file entropy (7.00 bits) - possible binary/encrypted content","snippet":"File: reference/slim-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:reference/smart-crop-image.md:1:heuristic-high-file-entropy-6-71-bits-possible-b","file":"reference/smart-crop-image.md","pattern":"[HEURISTIC] High file entropy (6.71 bits) - possible binary/encrypted content","snippet":"File: reference/smart-crop-image.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:5:heuristic-very-high-entropy-string-6-46-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (6.46 bits) - likely encoded/encrypted payload","snippet":"面向单张或批量图片的视觉处理、质量优化、内容理解与基础编辑目标，适用于图片尺寸缩放与体积治理、元信息探测、裁剪旋转翻转与圆角、颜色与锐化清晰度调整、负片、模糊与...","category":"obfuscation","line_end":5,"severity":"high","line_start":5},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-6-66-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (6.66 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"filesystem:reference/families/image-size-reduction.md:9:path-traversal-sequence","reason":"The match is a relative Markdown link such as ../... in documentation, not a filesystem API or user-controlled path operation. It does not demonstrate traversal.","verdict":"false_positive","confidence":0.99},{"id":"filesystem:reference/families/image-size-reduction.md:10:path-traversal-sequence","reason":"The match is a relative Markdown link such as ../... in documentation, not a filesystem API or user-controlled path operation. It does not demonstrate traversal.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:21:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:22:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:25:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:45:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:51:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:52:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:53:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:54:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:56:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:57:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:58:ruby-shell-backtick-execution","reason":"The detector matched Markdown inline-code delimiters around documented tool names and environment variables, not shell execution. No executable command or untrusted argument is evidenced by the finding.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:SKILL.md:20:path-traversal-sequence","reason":"The match is a relative Markdown link such as ../... in documentation, not a filesystem API or user-controlled path operation. It does not demonstrate traversal.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:reference/add-image-watermark.md:1:heuristic-high-file-entropy-6-40-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/adjust-image-color.md:1:heuristic-high-file-entropy-6-68-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/compress-image.md:1:heuristic-high-file-entropy-6-95-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/crop-image.md:1:heuristic-high-file-entropy-6-40-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/enhance-image.md:1:heuristic-high-file-entropy-6-62-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/erase-image.md:1:heuristic-high-file-entropy-6-55-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/evaluate-image-quality.md:1:heuristic-high-file-entropy-6-77-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/face-blur-image.md:1:heuristic-high-file-entropy-6-65-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/families/image-size-reduction.md:1:heuristic-high-file-entropy-6-74-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/flip-image.md:1:heuristic-high-file-entropy-6-59-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/gaussian-blur-image.md:1:heuristic-high-file-entropy-6-68-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/image-ocr.md:1:heuristic-high-file-entropy-6-78-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/invert-image.md:1:heuristic-high-file-entropy-6-65-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/mosaic-image.md:1:heuristic-high-file-entropy-6-62-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/probe-image-metadata.md:1:heuristic-high-file-entropy-6-34-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/remove-image-background.md:1:heuristic-high-file-entropy-6-57-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/resize-image.md:1:heuristic-high-file-entropy-6-68-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/rotate-image.md:1:heuristic-high-file-entropy-6-60-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/round-corner-image.md:1:heuristic-high-file-entropy-6-57-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/sharpen-image.md:1:heuristic-high-file-entropy-6-64-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/slim-image.md:1:heuristic-high-file-entropy-7-00-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:reference/smart-crop-image.md:1:heuristic-high-file-entropy-6-71-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:SKILL.md:5:heuristic-very-high-entropy-string-6-46-bits-lik","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-6-66-bits-possible-b","reason":"The match is an entropy heuristic on a Markdown documentation file, and localized prose can have high entropy. No encoded payload or obfuscation behavior is evidenced.","verdict":"false_positive","confidence":0.96}],"semantic_findings":[],"subject_marketplace_commit_sha":"5526951beaeca22519572a471618555839b53b05","subject_content_hash":"54378b912e1336e1cb0f8aa21214eb90c5d89b19ecf4804b522d7d4ec1e91d7d","subject_tree_hash":"173e2cd8bc450f5673a67b4211a8be5ffcb0ed7eb7afc1e588d9b842dd94c8a5","subject_plugin_path":"skills/volcengine/byted-mediakit-image","audit_payload_hash":"24c844d8498e5f9efd259bc38bac973e","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"5526951beaeca22519572a471618555839b53b05","contentHash":"54378b912e1336e1cb0f8aa21214eb90c5d89b19ecf4804b522d7d4ec1e91d7d","treeHash":"173e2cd8bc450f5673a67b4211a8be5ffcb0ed7eb7afc1e588d9b842dd94c8a5","pluginPath":"skills/volcengine/byted-mediakit-image","auditPayloadHash":"24c844d8498e5f9efd259bc38bac973e"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/volcengine-byted-mediakit-image/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}