📦

sound-effects

Name: sound-effects
Author: barty-bart

Révision du contenu r1 Sûr 📁 Accès au système de fichiers⚡ Contient des scripts⚙️ Commandes externes🌐 Accès réseau

Add Measured Sound Effects to Motion Graphics

Motion-graphics videos need synchronized sound effects and consistent audio levels. This skill combines recorded effects, beat checks, exported loudness measurements, and reports for human review.

Prend en charge: Claude Codex Code(CC)

📊 76 Adéquat

Maintain this Skill? Claim it 📊 76 Adéquat

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "sound-effects" from https://skillstore.io/skills/barty-bart-sound-effects.md and its manifest at https://skillstore.io/api/skills/barty-bart-sound-effects/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/barty-bart-sound-effects.md manifest signé GET /api/skills/barty-bart-sound-effects/manifest lockfile signé GET /api/skills/barty-bart-sound-effects/lockfile

Tester

Utilisation de « sound-effects ». Plan sound effects for a silent product demo before choosing music.

Résultat attendu:

Proposed cues: a quiet click for the button, a pop for the card, and an impact for the final reveal.
Music selection and publication use case remain unconfirmed.
No audio quality or loudness result is claimed before rendering and measurement.

Utilisation de « sound-effects ». Describe the deliverables from a completed sound pass.

Résultat attendu:

Video with mixed audio, an interactive cue report, and a beat-grid plot.
Cue frames and waveform checks, a measurement log, and up to five timestamps for headphone review.
A credits list with music details and warnings for unconfirmed licenses.

Utilisation de « sound-effects ». Replace an effect selected in the HTML report.

Résultat attendu:

The report exports selected alternatives into a swap file.
A new run applies those selections, rebuilds the video, and updates measurements and credits.

Audit de sécurité

Sûr

v1 • 20/10/2026 Ouvrir le rapport versionné

Reviewed all 400 supplied findings; most are benign documentation, attribution metadata, JSON escaping, and authorized media operations. Predictable temporary files are confirmed risks; unchecked eval remains conservatively confirmed without demonstrated media-only code injection. No evidence found of prompt injection or exfiltration; 77 omitted static matches still require manual review before automatic publication. Static review was capped at 400/477 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Fichiers analysés

2,390

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Éléments d’évaluation des capacités (4)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Élevé

scripts/sound_pass.py:24

Dynamic code evaluation with eval()

fps=eval(run(['ffprobe','-v','error','-select_streams','v:0','-show_entries','stream=r_frame_rate','

eval executes unchecked ffprobe output as Python instead of parsing a frame-rate ratio. Normal output is numeric; no media-only injection was demonstrated, so this remains conservatively confirmed.

Moyen

scripts/sound_pass.py:125

Temp directory access

run(['ffmpeg','-y','-v','error','-i',f'{A.out}/after.mp4','-ac','1','-ar',str(SR),'/tmp/after_audio.

FFmpeg overwrites a predictable shared temporary audio filename without private allocation or cleanup. Concurrent runs can corrupt results; permissive temporary-file access can expose extracted audio.

Moyen

scripts/sound_pass.py:128

Temp directory access

run(['ffmpeg','-y','-v','error','-ss',f"{max(0,c['t']+dt):.3f}",'-i',f'{A.out}/after.mp4','-frames:v

Cue frames use predictable shared temporary filenames with overwrite enabled. Concurrent runs or preexisting links can redirect or corrupt writes where filesystem protections permit.

Moyen

scripts/sound_pass.py:130

Temp directory access

for j,tag in enumerate('ab'): ax[j].imshow(plt.imread(f'/tmp/cue{k}{tag}.png')); ax[j].axis('off');

The report reads cue frames from predictable shared temporary names without verifying ownership or isolation. Another run or local process can substitute frames and invalidate review evidence.

Facteurs de risque

📁 Accès au système de fichiers (10)

README.md:3 scripts/sound_pass.py:4 scripts/sound_pass.py:125 scripts/sound_pass.py:128 scripts/sound_pass.py:130 scripts/sound_pass.py:154 scripts/sound_pass.py:168 scripts/sound_pass.py:20 scripts/sound_pass.py:57 scripts/sound_pass.py:64

⚡ Contient des scripts (1)

scripts/sound_pass.py:24

⚙️ Commandes externes (46)

🌐 Accès réseau (50)

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/barty-bart-sound-effects/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/barty-bart-sound-effects/security.svg)](https://skillstore.io/skills/barty-bart-sound-effects?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/barty-bart-sound-effects?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-sound-effects/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/barty-bart-sound-effects.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

barty-bart. (2026). sound-effects security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-sound-effects/audits/1

Citation BibTeX

@techreport{barty-bart-barty-bart-sound-effects-2026,
  author = {barty-bart},
  title = {sound-effects security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/barty-bart-sound-effects/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "sound-effects security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-sound-effects/audits/1"
identifiers:
  - type: other
    value: "skillstore:barty-bart-sound-effects:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Score a Product Demo

Add clicks, appearances, transitions, and reveals to an existing product animation, then inspect cue timing and measured audio levels.

Prepare a Social Video

Select recorded effects and music for a social video, verify publication permissions, and generate source credits.

Review a Client Sound Pass

Compare sound alternatives in an HTML report, export selections, and rerun the mix with stable cue indices.

Essayez ces prompts

Plan a First Sound Pass

Review my silent motion-graphics video and propose a cue list using the default sound kit. Ask about music licensing and publication before exporting.

Mix a Supplied Track

Add sound effects to this silent video using my licensed music track. Check beat alignment, measure exported loudness, and provide listening timestamps.

Revise Sound Choices

Apply my exported swap selections to the previous sound pass. Keep cue indices stable, regenerate the report, and recheck loudness and credits.

Audit a Final Sound Pass

Review this sound pass for a client release using only sounds whose licenses allow the publication use case. Report timing errors, exported loudness, mono measurements, and unresolved issues.

Bonnes pratiques

Confirm the publication use case and current source licenses before exporting the final video.
Inspect exported MP4 measurements and cue plots, then listen to the suggested timestamps with headphones.
Use trusted manifests and media in an isolated workspace; avoid concurrent runs until temporary-file handling is fixed.

Éviter

Treating beat plots or loudness measurements as proof that a mix sounds good.
Running the script on a video with essential original audio without a separate preservation plan.
Committing runtime Mixkit downloads or assuming every listed license permits every distribution format.

Foire aux questions

What software does this skill require?

It requires Python 3.10+, FFmpeg, librosa, soundfile, numpy, scipy, and matplotlib. Runtime downloads also use curl.

Does it generate synthetic sounds or music?

No. It uses recorded sound files and a supplied or selected music track.

Can it work without an internet connection?

Local mixing can use bundled sounds and local music. Default typing, other runtime sounds, and current license checks require network access.

Are all sounds licensed for every use?

No. Bundled sounds are listed as CC0, while runtime Mixkit assets have restrictions. Confirm current terms for your publication use case.

Does the script preserve existing voiceover?

No. It maps video from the source and audio from the new mix. Preserve voiceover separately before using the script.

Does it guarantee professional audio quality?

No. It targets measurable loudness and timing goals but still requires human listening. Review final measurements because export attempts are limited.