スキル sound-effects

📦

sound-effects

Name: sound-effects
Author: barty-bart

コンテンツリビジョン r1 安全 📁 ファイルシステムへのアクセス⚡ スクリプトを含む⚙️ 外部コマンド🌐 ネットワークアクセス

Add Measured Sound Effects to Motion Graphics

Motion-graphics videos need synchronized sound effects and consistent audio levels. This skill combines recorded effects, beat checks, exported loudness measurements, and reports for human review.

対応: Claude Codex Code(CC)

📊 76 十分

Maintain this Skill? Claim it 📊 76 十分

インストール前に停止して確認を求めてください。

計画を確認し、ファイルを変更する前にユーザーの明示的な同意を得てください。

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "sound-effects" from https://skillstore.io/skills/barty-bart-sound-effects.md and its manifest at https://skillstore.io/api/skills/barty-bart-sound-effects/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/barty-bart-sound-effects.md 署名済み manifest GET /api/skills/barty-bart-sound-effects/manifest 署名済み lockfile GET /api/skills/barty-bart-sound-effects/lockfile

テストする

「sound-effects」を使用しています。 Plan sound effects for a silent product demo before choosing music.

期待される結果:

Proposed cues: a quiet click for the button, a pop for the card, and an impact for the final reveal.
Music selection and publication use case remain unconfirmed.
No audio quality or loudness result is claimed before rendering and measurement.

「sound-effects」を使用しています。 Describe the deliverables from a completed sound pass.

期待される結果:

Video with mixed audio, an interactive cue report, and a beat-grid plot.
Cue frames and waveform checks, a measurement log, and up to five timestamps for headphone review.
A credits list with music details and warnings for unconfirmed licenses.

「sound-effects」を使用しています。 Replace an effect selected in the HTML report.

期待される結果:

The report exports selected alternatives into a swap file.
A new run applies those selections, rebuilds the video, and updates measurements and credits.

セキュリティ監査

安全

v1 • 2026/10/20 バージョン別レポートを開く

Reviewed all 400 supplied findings; most are benign documentation, attribution metadata, JSON escaping, and authorized media operations. Predictable temporary files are confirmed risks; unchecked eval remains conservatively confirmed without demonstrated media-only code injection. No evidence found of prompt injection or exfiltration; 77 omitted static matches still require manual review before automatic publication. Static review was capped at 400/477 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

スキャンされたファイル

2,390

解析済み行数

レビュー項目

誤検知を無視

機能レビュー項目 (4)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高

scripts/sound_pass.py:24

Dynamic code evaluation with eval()

fps=eval(run(['ffprobe','-v','error','-select_streams','v:0','-show_entries','stream=r_frame_rate','

eval executes unchecked ffprobe output as Python instead of parsing a frame-rate ratio. Normal output is numeric; no media-only injection was demonstrated, so this remains conservatively confirmed.

中

scripts/sound_pass.py:125

Temp directory access

run(['ffmpeg','-y','-v','error','-i',f'{A.out}/after.mp4','-ac','1','-ar',str(SR),'/tmp/after_audio.

FFmpeg overwrites a predictable shared temporary audio filename without private allocation or cleanup. Concurrent runs can corrupt results; permissive temporary-file access can expose extracted audio.

中

scripts/sound_pass.py:128

Temp directory access

run(['ffmpeg','-y','-v','error','-ss',f"{max(0,c['t']+dt):.3f}",'-i',f'{A.out}/after.mp4','-frames:v

Cue frames use predictable shared temporary filenames with overwrite enabled. Concurrent runs or preexisting links can redirect or corrupt writes where filesystem protections permit.

中

scripts/sound_pass.py:130

Temp directory access

for j,tag in enumerate('ab'): ax[j].imshow(plt.imread(f'/tmp/cue{k}{tag}.png')); ax[j].axis('off');

The report reads cue frames from predictable shared temporary names without verifying ownership or isolation. Another run or local process can substitute frames and invalidate review evidence.

リスク要因

📁 ファイルシステムへのアクセス (10)

README.md:3 scripts/sound_pass.py:4 scripts/sound_pass.py:125 scripts/sound_pass.py:128 scripts/sound_pass.py:130 scripts/sound_pass.py:154 scripts/sound_pass.py:168 scripts/sound_pass.py:20 scripts/sound_pass.py:57 scripts/sound_pass.py:64

⚡ スクリプトを含む (1)

scripts/sound_pass.py:24

⚙️ 外部コマンド (46)

🌐 ネットワークアクセス (50)

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/barty-bart-sound-effects/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/barty-bart-sound-effects/security.svg)](https://skillstore.io/skills/barty-bart-sound-effects?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/barty-bart-sound-effects?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-sound-effects/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/barty-bart-sound-effects.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

barty-bart. (2026). sound-effects security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-sound-effects/audits/1

BibTeX形式の引用

@techreport{barty-bart-barty-bart-sound-effects-2026,
  author = {barty-bart},
  title = {sound-effects security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/barty-bart-sound-effects/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "sound-effects security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-sound-effects/audits/1"
identifiers:
  - type: other
    value: "skillstore:barty-bart-sound-effects:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Score a Product Demo

Add clicks, appearances, transitions, and reveals to an existing product animation, then inspect cue timing and measured audio levels.

Prepare a Social Video

Select recorded effects and music for a social video, verify publication permissions, and generate source credits.

Review a Client Sound Pass

Compare sound alternatives in an HTML report, export selections, and rerun the mix with stable cue indices.

これらのプロンプトを試す

Plan a First Sound Pass

Review my silent motion-graphics video and propose a cue list using the default sound kit. Ask about music licensing and publication before exporting.

Mix a Supplied Track

Add sound effects to this silent video using my licensed music track. Check beat alignment, measure exported loudness, and provide listening timestamps.

Revise Sound Choices

Apply my exported swap selections to the previous sound pass. Keep cue indices stable, regenerate the report, and recheck loudness and credits.

Audit a Final Sound Pass

Review this sound pass for a client release using only sounds whose licenses allow the publication use case. Report timing errors, exported loudness, mono measurements, and unresolved issues.

ベストプラクティス

Confirm the publication use case and current source licenses before exporting the final video.
Inspect exported MP4 measurements and cue plots, then listen to the suggested timestamps with headphones.
Use trusted manifests and media in an isolated workspace; avoid concurrent runs until temporary-file handling is fixed.

回避

Treating beat plots or loudness measurements as proof that a mix sounds good.
Running the script on a video with essential original audio without a separate preservation plan.
Committing runtime Mixkit downloads or assuming every listed license permits every distribution format.

よくある質問

What software does this skill require?

It requires Python 3.10+, FFmpeg, librosa, soundfile, numpy, scipy, and matplotlib. Runtime downloads also use curl.

Does it generate synthetic sounds or music?

No. It uses recorded sound files and a supplied or selected music track.

Can it work without an internet connection?

Local mixing can use bundled sounds and local music. Default typing, other runtime sounds, and current license checks require network access.

Are all sounds licensed for every use?

No. Bundled sounds are listed as CC0, while runtime Mixkit assets have restrictions. Confirm current terms for your publication use case.

Does the script preserve existing voiceover?

No. It maps video from the source and audio from the new mix. Preserve voiceover separately before using the script.

Does it guarantee professional audio quality?

No. It targets measurable loudness and timing goals but still requires human listening. Review final measurements because export attempts are limited.