📦

videocut

Name: videocut
Author: chengfeng / AI产品自由

Revisión del contenido r3 Crítico ⚙️ Comandos externos📁 Acceso al sistema de archivos⚡ Contiene scripts🌐 Acceso a red🔑 Variables de entorno

Limpiar videos hablados con cortes por marca de tiempo

Los videos hablados suelen contener errores, muletillas y silencios largos. Esta skill aplica ediciones confirmadas por marca de tiempo con FFmpeg y comprueba el resultado mediante transcripción.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

No instales este Skill automáticamente.

La política canónica exige la revisión de un operador antes de cualquier acción de instalación.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "videocut" from https://skillstore.io/skills/ceeon-videocut.md and its manifest at https://skillstore.io/api/skills/ceeon-videocut/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/ceeon-videocut.md Manifest firmado GET /api/skills/ceeon-videocut/manifest Lockfile firmado GET /api/skills/ceeon-videocut/lockfile

Pruébalo

Usando "videocut". Una lista de tareas confirmada marca tres errores hablados y dos silencios largos para eliminación.

Resultado esperado:

La skill produce una nueva versión de video editada, una transcripción de verificación y un archivo de subtítulos SRT.

Usando "videocut". El usuario pide conservar dos elementos de silencio mientras elimina todos los demás rangos marcados.

Resultado esperado:

El corte final conserva las pausas solicitadas y elimina solo los rangos de marcas de tiempo aprobados.

Usando "videocut". Una pasada de revisión encuentra una muletilla restante después del primer corte.

Resultado esperado:

El flujo de trabajo crea una nueva tarea de eliminación y repite la edición después de la confirmación del usuario.

Auditoría de seguridad

Crítico

v9 • 23/7/2026 Abrir el informe versionado

Most alerts are false positives from Markdown examples, JavaScript template literals, expected media I/O, fixed relative paths, and Chinese text entropy. Confirmed risks include shell injection, an unauthenticated traversal-prone review server, generated-page script injection, arbitrary URL fetching, and external audio and credential handling. Publication should wait until the high-risk execution and server issues are fixed.

Archivos escaneados

3,676

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (4)

Crítico

scripts/review_server.js:35-40 scripts/review_server.js:47-139 scripts/review_server.js:142-181 scripts/review_server.js:370

Unauthenticated Review Server Exposes Files and Cut Operations

The server allows any origin, maps request URLs directly to filesystem paths, and exposes unauthenticated write and cut endpoints. Its unspecified listen host can expose traversal-based file reads and expensive edits to network peers.

The code has permissive CORS, no authentication, no path canonicalization, and no loopback host restriction. The exposed handlers perform file writes and invoke media processing.

Alto

scripts/volcengine_transcribe.sh:45

Environment file access

ENV_FILE="$(dirname "$(dirname "$SCRIPT_DIR")")/.env"

The script resolves and uses a shared .env file outside its own directory. It later reads VOLCENGINE_API_KEY from that credential file.

Alto

scripts/generate_review.js:778 scripts/generate_review.js:879-880

Generated Review Page Allows Script Injection

The generator inserts the video filename and serialized transcript data directly into HTML and an inline script without HTML-safe escaping. Crafted input can close the script or markup context and execute JavaScript.

The direct template interpolation is visible and JSON.stringify does not escape the HTML script-closing sequence. Both filename and transcript files are caller-controlled inputs.

Alto

scripts/volcengine_transcribe.sh:72-79 scripts/volcengine_transcribe.sh:108-144

Arbitrary Audio URL Fetch Enables SSRF and Reupload

The transcription script accepts any HTTP or HTTPS URL, follows redirects, and applies no destination restrictions. It then sends the downloaded content to Volcengine, enabling access to internal URLs and external disclosure.

The URL is accepted from the first argument and passed to curl with redirect following. The resulting file is base64-encoded and submitted to a third-party endpoint.

Elementos de revisión de capacidades (41)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto

scripts/cut_video.sh:59-60

Shell command substitution

TOTAL_SEGS=$(node -e "

The command substitution builds Node source containing the caller-controlled deletion-list path and ffprobe output. A path containing quotes can escape the JavaScript string and execute code.

Alto

scripts/cut_video.sh:120

Unix shell invocation

const script = '#!/bin/bash\nffmpeg -y -v error' +

This generated shell script embeds the input video path without shell escaping and is later executed with bash. A crafted filename can break the quoted argument and inject commands.

Alto

scripts/cut_video.sh:61

Node.js fs operations

const deleteSegs = JSON.parse(fs.readFileSync('$DELETE_JSON', 'utf8'));

The deletion-list path is interpolated directly into Node source rather than passed as an argument. Quote characters in the path create a code-injection path.

Alto

scripts/cut_video.sh:130

Node.js fs operations

fs.writeFileSync('$TMP_DIR/cmd_' + padded + '.sh', script);

The file operation writes executable shell scripts whose command text contains an unescaped input video path. Those files are executed later, making crafted filenames dangerous.

Alto

scripts/cut_video.sh:61

Synchronous file operations

const deleteSegs = JSON.parse(fs.readFileSync('$DELETE_JSON', 'utf8'));

The synchronous read is expressed inside dynamically constructed Node source with an unescaped caller-controlled path. This can become JavaScript code execution.

Alto

scripts/cut_video.sh:130

Synchronous file operations

fs.writeFileSync('$TMP_DIR/cmd_' + padded + '.sh', script);

This write persists generated shell commands containing an unescaped video path. The later bash execution turns malformed filenames into a command-injection risk.

Alto

scripts/review_server.js:16

Node.js child_process module

const { execSync } = require('child_process');

The server imports child_process and later builds shell command strings from the video path. Because the path can be caller-controlled, the module enables command injection in request-triggered work.

Alto

scripts/review_server.js:107

Synchronous process execution

execSync(`bash "${scriptPath}" "${VIDEO_FILE}" delete_segments.json "${outputFile}"`, {

execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.

Alto

scripts/review_server.js:114

Synchronous process execution

const originalDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv

Alto

scripts/review_server.js:115

Synchronous process execution

const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0

Alto

scripts/review_server.js:242

Synchronous process execution

audioOffset = parseFloat(execSync(`ffprobe -v error -show_entries format=start_time -of csv=p=0 "${a

execSync receives a command string containing a workspace-derived path. A quote or shell metacharacter in that path can alter the command.

Alto

scripts/review_server.js:251

Synchronous process execution

const duration = parseFloat(execSync(probeCmd).toString().trim());

Alto

scripts/review_server.js:326

Synchronous process execution

execSync(cmd, { stdio: 'pipe' });

Alto

scripts/review_server.js:329

Synchronous process execution

const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0

Alto

scripts/review_server.js:352

Synchronous process execution

execSync(cmd, { stdio: 'pipe' });

Alto

scripts/review_server.js:362

Synchronous process execution

execSync(concatCmd, { stdio: 'pipe' });

Alto

scripts/review_server.js:107

Ruby/shell backtick execution

execSync(`bash "${scriptPath}" "${VIDEO_FILE}" delete_segments.json "${outputFile}"`, {

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Alto

scripts/review_server.js:114

Ruby/shell backtick execution

const originalDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Alto

scripts/review_server.js:115

Ruby/shell backtick execution

const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Alto

scripts/review_server.js:242

Ruby/shell backtick execution

audioOffset = parseFloat(execSync(`ffprobe -v error -show_entries format=start_time -of csv=p=0 "${a

This JavaScript template literal constructs a shell command with a workspace-derived path and then passes it to execSync. A specially named directory can inject shell syntax.

Alto

scripts/review_server.js:250

Ruby/shell backtick execution

const probeCmd = `ffprobe -v error -show_entries format=duration -of csv=p=0 "file:${input}"`;

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Alto

scripts/review_server.js:323

Ruby/shell backtick execution

const cmd = `ffmpeg -y -i "file:${input}" -filter_complex "${filterComplex}" -map "[outv]" -map "[ou

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Alto

scripts/review_server.js:329

Ruby/shell backtick execution

const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Alto

scripts/review_server.js:349

Ruby/shell backtick execution

const cmd = `ffmpeg -y -ss ${seg.start.toFixed(3)} -i "file:${input}" -t ${segDuration.toFixed(3)} -

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Alto

scripts/review_server.js:360

Ruby/shell backtick execution

const concatCmd = `ffmpeg -y -f concat -safe 0 -i "${listFile}" -c copy "${output}"`;

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Alto

scripts/review_server.js:53

Node.js fs operations

fs.writeFileSync('saved_selection.json', body);

An unauthenticated HTTP endpoint accepts an unbounded request body and writes it to a fixed workspace file. Network clients can overwrite review state and consume memory or disk.

Alto

scripts/review_server.js:91

Node.js fs operations

fs.writeFileSync('delete_segments.json', JSON.stringify(deleteList, null, 2));

The unauthenticated cut endpoint writes attacker-supplied deletion ranges and immediately starts media processing. Any reachable client can alter output and trigger expensive work.

Alto

scripts/review_server.js:150

Node.js fs stat operations

if (!fs.existsSync(filePath)) {

The server applies the request URL directly to a relative filesystem path without canonicalization or root containment. Traversal sequences can make the stat operation target files outside the review directory.

Alto

scripts/review_server.js:156

Node.js fs stat operations

const stat = fs.statSync(filePath);

Alto

scripts/review_server.js:53

Synchronous file operations

fs.writeFileSync('saved_selection.json', body);

An unauthenticated HTTP endpoint accepts an unbounded request body and writes it to a fixed workspace file. Network clients can overwrite review state and consume memory or disk.

Alto

scripts/review_server.js:91

Synchronous file operations

fs.writeFileSync('delete_segments.json', JSON.stringify(deleteList, null, 2));

The unauthenticated cut endpoint writes attacker-supplied deletion ranges and immediately starts media processing. Any reachable client can alter output and trigger expensive work.

Alto

scripts/review_server.js:171

File stream creation

fs.createReadStream(filePath, { start, end }).pipe(res);

The stream serves a path derived directly from req.url without enforcing the review directory as a root. A traversal request can disclose arbitrary readable local files.

Alto

scripts/review_server.js:181

File stream creation

fs.createReadStream(filePath).pipe(res);

The stream serves a path derived directly from req.url without enforcing the review directory as a root. A traversal request can disclose arbitrary readable local files.

Alto

scripts/volcengine_transcribe.sh:18

Hardcoded URL

SUBMIT_URL="https://openspeech.bytedance.com/api/v3/auc/bigmodel/submit"

This endpoint receives the user audio and API key over HTTPS as part of transcription. The transfer is intentional but is a real external data-disclosure boundary.

Alto

scripts/volcengine_transcribe.sh:19

Hardcoded URL

QUERY_URL="https://openspeech.bytedance.com/api/v3/auc/bigmodel/query"

This endpoint is polled with the API key to retrieve transcription results. It is an intentional third-party network dependency with credential exposure.

Alto

scripts/volcengine_transcribe.sh:111

Node.js fs operations

data: fs.readFileSync(audioFile).toString('base64'),

The script reads the complete audio file and base64-encodes it into a request sent to Volcengine. This is intentional, but user media leaves the local environment.

Alto

scripts/volcengine_transcribe.sh:111

Synchronous file operations

data: fs.readFileSync(audioFile).toString('base64'),

The script reads the complete audio file and base64-encodes it into a request sent to Volcengine. This is intentional, but user media leaves the local environment.

Alto

scripts/volcengine_transcribe.sh:45

Hidden file access

ENV_FILE="$(dirname "$(dirname "$SCRIPT_DIR")")/.env"

The script locates a shared ancestor .env file and later extracts a live API key from it. This is real access to hidden credential storage.

Alto

scripts/volcengine_transcribe.sh:54

Generic API/secret keys

API_KEY=$(grep '^VOLCENGINE_API_KEY=' "$ENV_FILE" | tail -1 | cut -d'=' -f2- | tr -d '"' | tr -d "'"

This line reads VOLCENGINE_API_KEY from the shared .env file into process memory. The access is required for transcription but handles a live secret.

Alto

scripts/volcengine_transcribe.sh:140

Generic API/secret keys

-H "X-Api-Key: $API_KEY" \

The API key is placed in an outbound X-Api-Key header to the configured Volcengine endpoint. This is expected authentication but remains credential disclosure to a third party.

Alto

scripts/volcengine_transcribe.sh:166

Generic API/secret keys

-H "X-Api-Key: $API_KEY" \

The API key is placed in an outbound X-Api-Key header to the configured Volcengine endpoint. This is expected authentication but remains credential disclosure to a third party.

Factores de riesgo

⚙️ Comandos externos (50)

📁 Acceso al sistema de archivos (50)

⚡ Contiene scripts (5)

scripts/generate_review.js:895 scripts/generate_review.js:896 scripts/generate_review.js:1017 scripts/generate_review.js:1027 scripts/generate_review.js:1158

🌐 Acceso a red (12)

scripts/generate_review.js:1279 scripts/generate_review.js:1289 scripts/generate_review.js:1427 scripts/generate_review.js:1484 scripts/review_server.js:373 scripts/volcengine_transcribe.sh:7 scripts/volcengine_transcribe.sh:17 scripts/volcengine_transcribe.sh:18 scripts/volcengine_transcribe.sh:19 SKILL.md:5 SKILL.md:362 SKILL.md:515

🔑 Variables de entorno (10)

scripts/volcengine_transcribe.sh:23 scripts/volcengine_transcribe.sh:29 scripts/volcengine_transcribe.sh:49 scripts/volcengine_transcribe.sh:54 scripts/volcengine_transcribe.sh:56 scripts/volcengine_transcribe.sh:57 scripts/volcengine_transcribe.sh:58 scripts/volcengine_transcribe.sh:140 scripts/volcengine_transcribe.sh:166 SKILL.md:530

Auditado por: codex Ver historial de auditorías →

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/ceeon-videocut/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/ceeon-videocut/security.svg)](https://skillstore.io/skills/ceeon-videocut?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/ceeon-videocut?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ceeon-videocut/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/ceeon-videocut.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

chengfeng / AI产品自由. (2026). videocut security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/ceeon-videocut/audits/9

Cita BibTeX

@techreport{chengfeng-ai-ceeon-videocut-2026,
  author = {chengfeng / AI产品自由},
  title = {videocut security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/ceeon-videocut/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "videocut security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "chengfeng / AI产品自由"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/ceeon-videocut/audits/9"
identifiers:
  - type: other
    value: "skillstore:ceeon-videocut:audit:9"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Editar videos hablados de creadores

Elimina errores confirmados, muletillas y pausas largas de videos hablados grabados.

Preparar clips de cursos

Aplica cortes precisos por marca de tiempo a grabaciones de clases antes de publicar material de aprendizaje.

Limpiar informes internos

Convierte grabaciones sin pulir de reuniones o informes en clips más limpios con subtítulos.

Prueba estos prompts

Ejecutar cortes confirmados

Usa videocut para ejecutar las tareas de eliminación confirmadas para este video. Conserva los elementos sin marcar y genera el video editado.

Cortar y verificar el habla

Corta los rangos de marcas de tiempo marcados, vuelve a transcribir el archivo editado e informa si queda algún error de habla.

Conservar silencios seleccionados

Ejecuta todos los cortes marcados excepto los elementos de silencio 3 y 5. Conserva esas pausas y luego crea subtítulos para la versión final.

Iterar hasta limpiar

Aplica la lista de eliminación actual, crea una nueva versión, vuelve a ejecutar la revisión de transcripción y continúa solo con nuevos cortes confirmados.

Mejores prácticas

Confirma cada rango de eliminación antes de ejecutar FFmpeg.
Usa rangos de marcas de tiempo en lugar de buscar texto en la transcripción.
Revisa la transcripción editada antes de publicar el video final.

Evitar

No elimines tareas sin marcar de la lista de revisión.
No vuelvas a buscar texto cuando ya existan marcas de tiempo precisas.
No ejecutes comandos multimedia en rutas no confiables sin confirmación del usuario.