{"data":{"skill":{"slug":"volcengine-byted-mediakit-shared","name":"byted-mediakit-shared","icon":"📦","repo":"https://github.com/volcengine/mediakit-cli/tree/120059a6c4a089fb580edd24d8ecf93d687e3c96/skills/byted-mediakit-shared","status":"approved","author":"volcengine","authorVersion":"0.2.1","skillstoreRevision":1},"audit":{"id":"10f72420-27f2-41cc-9434-088db61c9657","skill_id":"07f9f7da-6dda-4473-9faa-94ba6471cf5b","version":1,"content_hash":"v3:5526951beaeca22519572a471618555839b53b05:12adb183ab72f82489c75439cea9314057cd8d830f6c21192840f64f8018b6be:0d737cdafecd62ca1ecd7218e4b73886f9357f59a882d025f7e2a8e24bd69e73:736b696c6c732f766f6c63656e67696e652f62797465642d6d656469616b69742d736861726564:25d2af97f34283a26758fd163a6ac1ca","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"Most alerts are false positives caused by Markdown backticks, Chinese text, and task identifiers. Several command blocks execute or update external software, while local media can be uploaded through cloud mode without explicit per-file consent.","remediation":[{"issue":"Cloud mode can upload local media without an explicit confirmation step.","severity":"high","suggestion":"Require confirmation before each local file upload and identify the destination service."},{"issue":"Installation and update examples execute an unpinned package with automatic confirmation.","severity":"high","suggestion":"Pin a reviewed package version and remove automatic confirmation from installation examples."},{"issue":"Command examples place variable values into shell commands without quoting guidance.","severity":"medium","suggestion":"Use structured argument arrays or require strict validation and shell quoting for every substituted value."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":26,"line_start":26},{"file":"SKILL.md","line_end":27,"line_start":27},{"file":"SKILL.md","line_end":29,"line_start":29},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":37,"line_start":34},{"file":"SKILL.md","line_end":39,"line_start":37},{"file":"SKILL.md","line_end":39,"line_start":39},{"file":"SKILL.md","line_end":40,"line_start":40},{"file":"SKILL.md","line_end":61,"line_start":60},{"file":"SKILL.md","line_end":62,"line_start":61},{"file":"SKILL.md","line_end":63,"line_start":62},{"file":"SKILL.md","line_end":77,"line_start":63},{"file":"SKILL.md","line_end":79,"line_start":77},{"file":"SKILL.md","line_end":83,"line_start":79},{"file":"SKILL.md","line_end":86,"line_start":83},{"file":"SKILL.md","line_end":90,"line_start":86},{"file":"SKILL.md","line_end":92,"line_start":90},{"file":"SKILL.md","line_end":96,"line_start":92},{"file":"SKILL.md","line_end":100,"line_start":96},{"file":"SKILL.md","line_end":102,"line_start":100},{"file":"SKILL.md","line_end":107,"line_start":102},{"file":"SKILL.md","line_end":112,"line_start":107},{"file":"SKILL.md","line_end":114,"line_start":112},{"file":"SKILL.md","line_end":114,"line_start":114},{"file":"SKILL.md","line_end":115,"line_start":115},{"file":"SKILL.md","line_end":116,"line_start":116},{"file":"SKILL.md","line_end":121,"line_start":121},{"file":"SKILL.md","line_end":127,"line_start":126},{"file":"SKILL.md","line_end":127,"line_start":127},{"file":"SKILL.md","line_end":135,"line_start":132},{"file":"SKILL.md","line_end":140,"line_start":135},{"file":"SKILL.md","line_end":142,"line_start":140},{"file":"SKILL.md","line_end":146,"line_start":142},{"file":"SKILL.md","line_end":148,"line_start":146},{"file":"SKILL.md","line_end":150,"line_start":148},{"file":"SKILL.md","line_end":156,"line_start":150},{"file":"SKILL.md","line_end":160,"line_start":156},{"file":"SKILL.md","line_end":166,"line_start":160}]}],"critical_findings":[],"high_findings":[{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":79,"line_start":77}],"confidence":0.99,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The block runs an unpinned npm package through npx with automatic confirmation. This exposes users to package supply-chain and installation risks."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":92,"line_start":90}],"confidence":0.99,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The block executes an unpinned npm package with automatic confirmation to reinstall skills. Remote package execution creates a supply-chain risk."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":160,"line_start":156}],"confidence":0.98,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The block includes an update command that can replace installed software. Automatic software updates create integrity and supply-chain exposure."},{"title":"Implicit Local Media Upload","locations":[{"file":"SKILL.md","line_end":127,"line_start":120}],"confidence":0.97,"description":"The skill passes local paths to an adapter that uploads files. Cloud-first configuration can transmit sensitive media without explicit per-file consent.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The instructions explicitly state that the media adapter handles uploads and that current configuration may select Cloud-first mode."}],"medium_findings":[{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":24,"line_start":24}],"confidence":0.96,"description":"1. 通过本 Skill 或领域 Skill **实际执行** `mediakit-cli` 业务命令时,必须在同一次","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The instruction explicitly directs the agent to execute mediakit-cli business commands. This grants an external process access to user media and configured services."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":37,"line_start":34}],"confidence":0.97,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The fenced block contains media processing and cloud task query commands with substituted values. Executing these commands can access files and network services."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":100,"line_start":96}],"confidence":0.92,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The commands initialize MediaKit, read its configuration, and inspect local dependencies. They execute an external binary and may access or modify local configuration."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":135,"line_start":132}],"confidence":0.96,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The command templates invoke local or cloud media tools with variable domains, tools, and flags. Execution can affect files or transmit data."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":142,"line_start":140}],"confidence":0.95,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The command changes the MediaKit output path using a substituted directory value. This mutates local configuration and requires validated arguments."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":150,"line_start":148}],"confidence":0.9,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The block invokes the external CLI to query a cloud task with a substituted identifier. This performs a network-backed operation through configured credentials."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":256,"audit_model":"codex","audited_at":"2026-09-12T11:54:20.062+00:00","created_at":"2026-09-14T00:42:51.922173+00:00","static_findings":[{"id":"blocker:reference/query_task.md:9:system-reconnaissance","file":"reference/query_task.md","pattern":"System reconnaissance","snippet":"- task_id 必须来自真实异步任务受理结果;可选轮询参数仅在用户明确指定,或可从用户意图准确确定时填写,不得伪造。","category":"blocker","line_end":9,"severity":"low","line_start":9},{"id":"blocker:reference/query_task.md:29:system-reconnaissance","file":"reference/query_task.md","pattern":"System reconnaissance","snippet":"--task-id <task_id>","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"智能增强能力统一到 `mediakit-cli`,适合从素材处理到成片制作的完整工作流。","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. 通过本 Skill 或领域 Skill **实际执行** `mediakit-cli` 业务命令时,必须在同一次","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `MEDIAKIT_SURFACE=skill`(本 Skill / 领域 Skill 调用固定为 `skill`)","category":"external_commands","line_end":26,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `MEDIAKIT_RUNTIME=<当前 Agent 宿主>`(无法判断时用 `unknown`)","category":"external_commands","line_end":27,"severity":"medium","line_start":27},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. `--help` / `--schema` / `--domains` / `--version` 等只读发现命令可不注入;一旦发起","category":"external_commands","line_end":29,"severity":"medium","line_start":29},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"真实处理或 `shared query-task`,必须注入。","category":"external_commands","line_end":30,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":37,"severity":"medium","line_start":34},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":39,"severity":"medium","line_start":37},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`<runtime>` 填当前宿主标识(如 `cursor`、`claude-code`、`codex`);不确定时填","category":"external_commands","line_end":39,"severity":"medium","line_start":39},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`unknown`。不要省略 `MEDIAKIT_SURFACE=skill`。","category":"external_commands","line_end":40,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| 对现有素材进行裁剪、拼接、转场、滤镜、运镜、叠加、混音或成片编排 | `byted-mediakit-editing` |","category":"external_commands","line_end":61,"severity":"medium","line_start":60},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| 处理音频转码、音轨、语音边界或人声与背景声                   | `byted-mediakit-audio`   |","category":"external_commands","line_end":62,"severity":"medium","line_start":61},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| 处理单张或批量图片、尺寸体积治理、文字识别、图片质量或图像编辑 | `byted-mediakit-image`   |","category":"external_commands","line_end":63,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| 视频理解、高光拆条、抽帧、画质增强或检测、提取字幕、语音转字幕、字幕擦除、水印、隐私、转码或视频智能处理 | `byted-mediakit-video`   |","category":"external_commands","line_end":77,"severity":"medium","line_start":63},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":79,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":83,"severity":"medium","line_start":79},{"id":"external_commands:SKILL.md:83:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":86,"severity":"medium","line_start":83},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":90,"severity":"medium","line_start":86},{"id":"external_commands:SKILL.md:90:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":92,"severity":"medium","line_start":90},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":96,"severity":"medium","line_start":92},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":100,"severity":"medium","line_start":96},{"id":"external_commands:SKILL.md:100:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":102,"severity":"medium","line_start":100},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`doctor` 用于检查当前 CLI 与本地处理依赖;具体工具是否支持本地处理,以对应","category":"external_commands","line_end":107,"severity":"medium","line_start":102},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":112,"severity":"medium","line_start":107},{"id":"external_commands:SKILL.md:112:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":114,"severity":"medium","line_start":112},{"id":"external_commands:SKILL.md:114:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`--schema` 只读取当前有效模式的机器合同,不发起业务调用;顶层包含 `name`、","category":"external_commands","line_end":114,"severity":"medium","line_start":114},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`description`、`input_schema` 和 `output_schema`。构造参数前先读取目标工具的","category":"external_commands","line_end":115,"severity":"medium","line_start":115},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`--help` 与 `--schema`,并以完整 reference 中的字段说明为 Agent 使用指引。","category":"external_commands","line_end":116,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`/path/to/file.jpg` 或 `./file.jpg`),不要自行添加 `mediakit://` 前缀;CLI","category":"external_commands","line_end":121,"severity":"medium","line_start":121},{"id":"external_commands:SKILL.md:126:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"未指定模式时,由 CLI 当前配置选择 Cloud-first 或 Local-first。`--local` 与","category":"external_commands","line_end":127,"severity":"medium","line_start":126},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`--cloud` 只用于单次命令覆盖;CLI 的 `--help` 与 `--schema` 只显示所选模式的","category":"external_commands","line_end":127,"severity":"medium","line_start":127},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":135,"severity":"medium","line_start":132},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":140,"severity":"medium","line_start":135},{"id":"external_commands:SKILL.md:140:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":142,"severity":"medium","line_start":140},{"id":"external_commands:SKILL.md:142:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":146,"severity":"medium","line_start":142},{"id":"external_commands:SKILL.md:146:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Cloud 异步能力返回 `task_id`。先使用共享查询命令获取任务状态与最终业务结果:","category":"external_commands","line_end":148,"severity":"medium","line_start":146},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":150,"severity":"medium","line_start":148},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":156,"severity":"medium","line_start":150},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":160,"severity":"medium","line_start":156},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":166,"severity":"medium","line_start":160},{"id":"blocker:SKILL.md:36:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"MEDIAKIT_SURFACE=skill MEDIAKIT_RUNTIME=<runtime> mediakit-cli shared query-task --task-id <task_id>","category":"blocker","line_end":36,"severity":"low","line_start":36},{"id":"blocker:SKILL.md:149:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"mediakit-cli shared query-task --task-id <task_id>","category":"blocker","line_end":149,"severity":"low","line_start":149},{"id":"obfuscation:reference/query_task.md:1:heuristic-high-file-entropy-6-30-bits-possible-b","file":"reference/query_task.md","pattern":"[HEURISTIC] High file entropy (6.30 bits) - possible binary/encrypted content","snippet":"File: reference/query_task.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1},{"id":"obfuscation:SKILL.md:5:heuristic-very-high-entropy-string-6-17-bits-lik","file":"SKILL.md","pattern":"[HEURISTIC] Very high entropy string (6.17 bits) - likely encoded/encrypted payload","snippet":"MediaKit 是面向音视频与图像处理的专业工具集，覆盖视频剪辑与合成、音频处理、视频理解与增强、图像处理与内容理解等工作流。用户明确提出剪辑、拼接、裁剪、转...","category":"obfuscation","line_end":5,"severity":"high","line_start":5},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-6-68-bits-possible-b","file":"SKILL.md","pattern":"[HEURISTIC] High file entropy (6.68 bits) - possible binary/encrypted content","snippet":"File: SKILL.md","category":"obfuscation","line_end":1,"severity":"high","line_start":1}],"finding_verdicts":[{"id":"blocker:reference/query_task.md:9:system-reconnaissance","reason":"The line requires a genuine task identifier and forbids fabricated parameters. It does not inspect the host system.","verdict":"false_positive","confidence":0.99},{"id":"blocker:reference/query_task.md:29:system-reconnaissance","reason":"This is a documented task identifier placeholder for a cloud result query. It is not a reconnaissance command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"Backticks format the mediakit-cli name as inline Markdown. No Ruby or shell backtick execution occurs.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The instruction explicitly directs the agent to execute mediakit-cli business commands. This grants an external process access to user media and configured services.","verdict":"confirmed","severity":"medium","confidence":0.96},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The backticks delimit an environment variable assignment in documentation. They do not invoke a shell.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:27:ruby-shell-backtick-execution","reason":"The detected text is an environment variable placeholder formatted as Markdown. It contains no executable backtick construct.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:29:ruby-shell-backtick-execution","reason":"These are names of read-only discovery flags in inline Markdown. The line does not execute them.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"The command name is referenced in prose to explain environment tagging. The backticks are Markdown syntax.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:34:ruby-shell-backtick-execution","reason":"The fenced block contains media processing and cloud task query commands with substituted values. Executing these commands can access files and network services.","verdict":"confirmed","severity":"medium","confidence":0.97},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","reason":"The detected backticks close a Markdown code fence. The adjacent text only explains a runtime label.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","reason":"Runtime examples are inline Markdown labels, not executable backtick expressions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"The line formats a fallback value and environment variable name. It performs no command execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:60:ruby-shell-backtick-execution","reason":"The backticks format a related skill name inside a routing table. No shell command is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","reason":"The detected text is a related skill identifier in Markdown. It is not executable.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The backticks only format an image skill identifier in a table.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:63:ruby-shell-backtick-execution","reason":"The backticks only format a video skill identifier in a routing table.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","reason":"The block runs an unpinned npm package through npx with automatic confirmation. This exposes users to package supply-chain and installation risks.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"external_commands:SKILL.md:79:ruby-shell-backtick-execution","reason":"The detected token is the closing marker of a Markdown code fence.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:83:ruby-shell-backtick-execution","reason":"The block contains hardcoded version and help checks. These read-only commands do not interpolate user input.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","reason":"The finding points to a closing code fence and surrounding explanatory prose.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:90:ruby-shell-backtick-execution","reason":"The block executes an unpinned npm package with automatic confirmation to reinstall skills. Remote package execution creates a supply-chain risk.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","reason":"This is a Markdown code fence delimiter, not a Ruby or shell execution operator.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","reason":"The commands initialize MediaKit, read its configuration, and inspect local dependencies. They execute an external binary and may access or modify local configuration.","verdict":"confirmed","severity":"medium","confidence":0.92},{"id":"external_commands:SKILL.md:100:ruby-shell-backtick-execution","reason":"The finding starts at a closing Markdown fence. The following text describes the doctor command without invoking it.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","reason":"Backticks format the doctor subcommand in prose. No command is executed on this line.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","reason":"The block lists hardcoded help and schema discovery commands. The skill states that these commands do not perform business operations.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:112:ruby-shell-backtick-execution","reason":"The detected text is a Markdown fence ending a read-only command example.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:114:ruby-shell-backtick-execution","reason":"Inline code formatting identifies a schema flag and response field. It is not shell execution.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:115:ruby-shell-backtick-execution","reason":"The backticks format schema field names in documentation.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The line names help and schema flags with Markdown formatting. It does not execute a command.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","reason":"The detected strings are example file paths and a URI prefix in Markdown. The upload risk is contextual, not backtick execution.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:126:ruby-shell-backtick-execution","reason":"The line formats command flags in prose. It does not execute the CLI.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:127:ruby-shell-backtick-execution","reason":"Help and schema flags are documented with inline Markdown. No executable backtick expression exists.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","reason":"The command templates invoke local or cloud media tools with variable domains, tools, and flags. Execution can affect files or transmit data.","verdict":"confirmed","severity":"medium","confidence":0.96},{"id":"external_commands:SKILL.md:135:ruby-shell-backtick-execution","reason":"The finding points to a closing Markdown code fence and explanatory text.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:140:ruby-shell-backtick-execution","reason":"The command changes the MediaKit output path using a substituted directory value. This mutates local configuration and requires validated arguments.","verdict":"confirmed","severity":"medium","confidence":0.95},{"id":"external_commands:SKILL.md:142:ruby-shell-backtick-execution","reason":"This is the closing delimiter of a Markdown command block.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:146:ruby-shell-backtick-execution","reason":"The task identifier is referenced as inline code in descriptive text. No execution occurs on this line.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:148:ruby-shell-backtick-execution","reason":"The block invokes the external CLI to query a cloud task with a substituted identifier. This performs a network-backed operation through configured credentials.","verdict":"confirmed","severity":"medium","confidence":0.9},{"id":"external_commands:SKILL.md:150:ruby-shell-backtick-execution","reason":"The detected backticks are a Markdown code fence terminator.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","reason":"The block includes an update command that can replace installed software. Automatic software updates create integrity and supply-chain exposure.","verdict":"confirmed","severity":"high","confidence":0.98},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","reason":"This finding identifies the closing fence of the update command block, not a separate execution mechanism.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:36:system-reconnaissance","reason":"The command queries a known cloud task by its identifier. It does not enumerate or inspect the host system.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:149:system-reconnaissance","reason":"This is a cloud task status query using a previously returned identifier, not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:reference/query_task.md:1:heuristic-high-file-entropy-6-30-bits-possible-b","reason":"The file is readable Chinese Markdown containing tables and command documentation. No encoded, encrypted, or binary payload is present.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:5:heuristic-very-high-entropy-string-6-17-bits-lik","reason":"The string is a natural-language Chinese skill description. Unicode text caused the entropy heuristic, not obfuscation.","verdict":"false_positive","confidence":0.99},{"id":"obfuscation:SKILL.md:1:heuristic-high-file-entropy-6-68-bits-possible-b","reason":"SKILL.md is readable Chinese Markdown with YAML metadata and command examples. It contains no binary or encrypted content.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[{"title":"Implicit Local Media Upload","severity":"high","locations":[{"file":"SKILL.md","line_end":127,"line_start":120}],"confidence":0.97,"description":"The skill passes local paths to an adapter that uploads files. Cloud-first configuration can transmit sensitive media without explicit per-file consent.","confidence_reasoning":"The instructions explicitly state that the media adapter handles uploads and that current configuration may select Cloud-first mode."}],"subject_marketplace_commit_sha":"5526951beaeca22519572a471618555839b53b05","subject_content_hash":"12adb183ab72f82489c75439cea9314057cd8d830f6c21192840f64f8018b6be","subject_tree_hash":"0d737cdafecd62ca1ecd7218e4b73886f9357f59a882d025f7e2a8e24bd69e73","subject_plugin_path":"skills/volcengine/byted-mediakit-shared","audit_payload_hash":"25d2af97f34283a26758fd163a6ac1ca","confirmed_risk_level":"high","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"5526951beaeca22519572a471618555839b53b05","contentHash":"12adb183ab72f82489c75439cea9314057cd8d830f6c21192840f64f8018b6be","treeHash":"0d737cdafecd62ca1ecd7218e4b73886f9357f59a882d025f7e2a8e24bd69e73","pluginPath":"skills/volcengine/byted-mediakit-shared","auditPayloadHash":"25d2af97f34283a26758fd163a6ac1ca"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/volcengine-byted-mediakit-shared/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":1,"capabilityReviewCount":9,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}