📦

byted-mediakit-shared

Name: byted-mediakit-shared
Author: volcengine

v0.2.1 مراجعة المحتوى r1 مخاطر عالية ⚙️ الأوامر الخارجية

Route Media Tasks Through MediaKit

Complex media requests require the correct MediaKit domain and command contract. This skill routes requests and explains shared CLI setup, modes, inputs, and task polling.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

توقف واطلب التأكيد قبل التثبيت.

راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "byted-mediakit-shared" from https://skillstore.io/skills/volcengine-byted-mediakit-shared.md and its manifest at https://skillstore.io/api/skills/volcengine-byted-mediakit-shared/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/volcengine-byted-mediakit-shared.md manifest موقَّع GET /api/skills/volcengine-byted-mediakit-shared/manifest lockfile موقَّع GET /api/skills/volcengine-byted-mediakit-shared/lockfile

اختبرها

جارٍ استخدام "byted-mediakit-shared". Remove background noise from an interview and prepare the audio for editing.

النتيجة المتوقعة:

Selected the audio domain. Required inputs are the source media, desired output format, and any voice preservation requirements.

جارٍ استخدام "byted-mediakit-shared". Enhance a local video in cloud mode and wait for completion.

النتيجة المتوقعة:

Cloud upload confirmation is required. After submission, the workflow polls the returned task identifier and reports the final media result.

جارٍ استخدام "byted-mediakit-shared". Resize a folder of product images while preserving quality.

النتيجة المتوقعة:

Selected the image domain. The next step is to inspect batch support, size constraints, output format, and local processing availability.

التدقيق الأمني

مخاطر عالية

v1 • ١٢‏/٩‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Most alerts are false positives caused by Markdown backticks, Chinese text, and task identifiers. Several command blocks execute or update external software, while local media can be uploaded through cloud mode without explicit per-file consent.

الملفات التي تم فحصها

256

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (1)

مرتفع

SKILL.md:120-127

Implicit Local Media Upload

The skill passes local paths to an adapter that uploads files. Cloud-first configuration can transmit sensitive media without explicit per-file consent.

The instructions explicitly state that the media adapter handles uploads and that current configuration may select Cloud-first mode.

عناصر مراجعة القدرات (9)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

مرتفع

SKILL.md:77-79

Ruby/shell backtick execution

```bash

The block runs an unpinned npm package through npx with automatic confirmation. This exposes users to package supply-chain and installation risks.

مرتفع

SKILL.md:90-92

Ruby/shell backtick execution

```bash

The block executes an unpinned npm package with automatic confirmation to reinstall skills. Remote package execution creates a supply-chain risk.

مرتفع

SKILL.md:156-160

Ruby/shell backtick execution

```bash

The block includes an update command that can replace installed software. Automatic software updates create integrity and supply-chain exposure.

متوسط

SKILL.md:24

Ruby/shell backtick execution

1. 通过本 Skill 或领域 Skill **实际执行** `mediakit-cli` 业务命令时,必须在同一次

The instruction explicitly directs the agent to execute mediakit-cli business commands. This grants an external process access to user media and configured services.

متوسط

SKILL.md:34-37

Ruby/shell backtick execution

```bash

The fenced block contains media processing and cloud task query commands with substituted values. Executing these commands can access files and network services.

متوسط

SKILL.md:96-100

Ruby/shell backtick execution

```bash

The commands initialize MediaKit, read its configuration, and inspect local dependencies. They execute an external binary and may access or modify local configuration.

متوسط

SKILL.md:132-135

Ruby/shell backtick execution

```bash

The command templates invoke local or cloud media tools with variable domains, tools, and flags. Execution can affect files or transmit data.

متوسط

SKILL.md:140-142

Ruby/shell backtick execution

```bash

The command changes the MediaKit output path using a substituted directory value. This mutates local configuration and requires validated arguments.

متوسط

SKILL.md:148-150

Ruby/shell backtick execution

```bash

The block invokes the external CLI to query a cloud task with a substituted identifier. This performs a network-backed operation through configured credentials.

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/volcengine-byted-mediakit-shared/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/volcengine-byted-mediakit-shared/security.svg)](https://skillstore.io/skills/volcengine-byted-mediakit-shared?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/volcengine-byted-mediakit-shared?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/volcengine-byted-mediakit-shared/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/volcengine-byted-mediakit-shared.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

volcengine. (2026). byted-mediakit-shared security audit report (audit version 1) [Author version 0.2.1]. Skillstore. https://skillstore.io/skills/volcengine-byted-mediakit-shared/audits/1

اقتباس BibTeX

@techreport{volcengine-volcengine-byted-mediakit-shared-2026,
  author = {volcengine},
  title = {byted-mediakit-shared security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/volcengine-byted-mediakit-shared/audits/1},
  note = {Author version 0.2.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "byted-mediakit-shared security audit report (audit version 1)"
version: "0.2.1"
type: report
authors:
  - name: "volcengine"
date-released: "2026-09-12"
url: "https://skillstore.io/skills/volcengine-byted-mediakit-shared/audits/1"
identifiers:
  - type: other
    value: "skillstore:volcengine-byted-mediakit-shared:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

100

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Plan a Video Edit

Select the editing skill and identify required inputs before processing existing footage.

Prepare Batch Images

Route resizing, compression, recognition, or image quality requests to the image workflow.

Coordinate Media Automation

Choose local or cloud execution and track asynchronous tasks across a production workflow.

جرّب هذه الموجّهات

Choose a Media Domain

I need to [goal] with [media type]. Identify the MediaKit domain skill and ask for missing information before processing.

Inspect a Media Tool

For [goal], load the correct domain skill. Inspect the selected tool help, schema, and reference, then summarize required inputs.

Run a Local Workflow

Process [input path] for [goal]. Prefer local mode, confirm tool support, validate parameters, and report the output location.

Manage a Cloud Pipeline

Build a MediaKit workflow for [inputs] and [deliverable]. Confirm uploads, execute validated commands, poll genuine task IDs, and summarize results.

أفضل الممارسات

State the media type, processing goal, and expected output before choosing a domain.
Inspect current help, schema, and reference documentation before constructing parameters.
Confirm cloud uploads and use only genuine task identifiers returned by MediaKit.

تجنب

Do not guess a tool when the user has not stated a processing goal.
Do not invent paths, URLs, task identifiers, enum values, or business parameters.
Do not assume local and cloud modes expose identical parameters or results.

الأسئلة المتكررة

Does this skill edit media directly?

No. It routes requests and explains shared CLI behavior. Domain skills provide specific tools and parameters.

Which media domains are supported?

It routes audio, video editing, image processing, and video understanding or enhancement workflows.

Is MediaKit CLI required?

Yes. The workflow requires mediakit-cli and may require local media dependencies.

Can processing remain local?

Some tools support local mode. Check the selected domain skill, tool reference, help, and schema first.

Can local files be uploaded?

Yes. The CLI adapter may upload local media in cloud mode, so confirm the destination and user consent.

How are asynchronous tasks checked?

Use the shared query protocol with the genuine task identifier returned by a cloud operation.

تفاصيل المطور

المؤلف

volcengine

الترخيص

MIT

إصدار المؤلف

v0.2.1

مراجعة Skillstore

المستودع

https://github.com/volcengine/mediakit-cli/tree/120059a6c4a089fb580edd24d8ecf93d687e3c96/skills/byted-mediakit-shared

مرجع

5526951beaeca22519572a471618555839b53b05

حداثة الصيانة

١٤‏/٩‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📄 LICENSE

📁 reference/

📄 query_task.md

📄 SKILL.md

byted-mediakit-shared

التثبيت باستخدام Agent لدي

موارد مهيّأة لـ Agents

اختبرها

التدقيق الأمني

مخاوف أمنية مؤكدة (1)

عوامل الخطر

نسخ رابط التقرير

شارة Markdown

شارة HTML

بطاقة قابلة للتضمين

اقتباس APA

اقتباس BibTeX

CITATION.cff

تقييم Skillstore

ما الذي يمكنك بناؤه

Plan a Video Edit

Prepare Batch Images

Coordinate Media Automation

جرّب هذه الموجّهات

أفضل الممارسات

تجنب

الأسئلة المتكررة

تفاصيل المطور