スキル video-edit
📦
video-edit
コンテンツリビジョン r1 高リスク ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス
Edit Videos with Intent-Routed AI Models
Choosing the wrong video model wastes time and weakens identity or motion consistency. This skill routes each edit to a suitable RunComfy model with focused prompts.
対応: Claude Codex Code(CC)
インストール前に停止して確認を求めてください。
計画を確認し、ファイルを変更する前にユーザーの明示的な同意を得てください。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "video-edit" from https://skillstore.io/skills/genmedia-labs-video-edit.md and its manifest at https://skillstore.io/api/skills/genmedia-labs-video-edit/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「video-edit」を使用しています。 Replace a talking-head background with a neutral office and keep the speaker unchanged.
期待される結果:
Selected Wan 2.7 Edit-Video. The edit preserves face, pose, lip movement, framing, and original audio while changing only the background.
「video-edit」を使用しています。 Make the target character follow the dance from a reference clip.
期待される結果:
Selected Kling 2.6 Pro Motion Control. The target image defines character identity, while the reference video supplies motion and optional sound.
「video-edit」を使用しています。 Change a walking subject's outfit to business attire without changing their face.
期待される結果:
Selected Lucy Edit Restyle. The prompt limits the change to clothing and preserves the subject's face and motion at 720p.
セキュリティ監査
高リスクv1 • 2026/8/13 バージョン別レポートを開く
Most static alerts are false positives caused by Markdown backticks, placeholder HTTPS URLs, and ellipses misread as path traversal. Confirmed risks include unpinned third-party installation, external CLI execution, unsafe shell interpolation of user-derived JSON, and disclosed third-party processing of prompts and media.
1
スキャンされたファイル
226
解析済み行数
9
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (3)
高
Shell Injection Risk in Inline JSON Commands
Examples place prompts and media URLs inside single-quoted JSON passed through a shell. Line 222 considers only CLI expansion, but shell parsing occurs before the CLI receives the argument.
The skill is designed to insert user edit text into these commands, and the examples rely on shell quoting. One example manually escapes an apostrophe, but no general escaping requirement is defined.
中
Unpinned Third-Party Code Installation
The setup runs an unversioned npx tool against a mutable repository and globally installs the latest RunComfy CLI. A compromised future release could execute during installation.
Both commands visibly omit immutable versions or commit references. npm and npx installation can execute package lifecycle code.
低
Third-Party Processing of Prompts and Media
The CLI sends prompts to RunComfy, directs its servers to fetch supplied media URLs, and downloads generated results. Sensitive prompts or media leave the local environment.
The networking and third-party fetch behavior is explicitly documented. This is expected functionality, but it creates a clear privacy boundary.
機能レビュー項目 (9)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
中
Ruby/shell backtick execution
on the wrong model. Calls `runcomfy run <vendor>/<model>/<endpoint>`
The skill explicitly delegates work to the local RunComfy CLI, which submits remote jobs and downloads output files. This is an intentional external-command capability with network and filesystem effects.
中
Ruby/shell backtick execution
```bash
The installation example runs an unversioned npx package against a mutable GitHub repository. This executes third-party package code and installs remote skill content.
中
Ruby/shell backtick execution
1. **RunComfy CLI** — `npm i -g @runcomfy/cli`
The prerequisite globally installs an unpinned npm package, which can execute package lifecycle code. This creates a real third-party supply-chain boundary.
中
Ruby/shell backtick execution
The skill picks one of Wan 2.7 Edit-Video / Kling 2.6 Pro Motion Control / Lucy Edit Restyle based o
The skill explicitly delegates work to the local RunComfy CLI, which submits remote jobs and downloads output files. This is an intentional external-command capability with network and filesystem effects.
リスク要因
⚙️ 外部コマンド (47)
SKILL.md:13 SKILL.md:27-29 SKILL.md:29-37 SKILL.md:37-49 SKILL.md:49-50 SKILL.md:50-51 SKILL.md:51-58 SKILL.md:58-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67 SKILL.md:68-69 SKILL.md:69 SKILL.md:70 SKILL.md:71-77 SKILL.md:77-85 SKILL.md:85-89 SKILL.md:89-98 SKILL.md:98-102 SKILL.md:102-104 SKILL.md:104-105 SKILL.md:105-112 SKILL.md:112-120 SKILL.md:120-121 SKILL.md:121-122 SKILL.md:122-123 SKILL.md:123-124 SKILL.md:124 SKILL.md:128-138 SKILL.md:138-143 SKILL.md:143-145 SKILL.md:145 SKILL.md:151-159 SKILL.md:159-160 SKILL.md:160-161 SKILL.md:161 SKILL.md:167-174 SKILL.md:174-178 SKILL.md:178-185 SKILL.md:185-190 SKILL.md:190-200 SKILL.md:200-217 SKILL.md:217 SKILL.md:221 SKILL.md:222-224 SKILL.md:224
🌐 ネットワークアクセス (10)
📁 ファイルシステムへのアクセス (9)
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/genmedia-labs-video-edit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/genmedia-labs-video-edit?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/genmedia-labs-video-edit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/genmedia-labs-video-edit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/genmedia-labs-video-edit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
genmedia-labs. (2026). video-edit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/genmedia-labs-video-edit/audits/1BibTeX形式の引用
@techreport{genmedia-labs-genmedia-labs-video-edit-2026,
author = {genmedia-labs},
title = {video-edit security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/genmedia-labs-video-edit/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "video-edit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "genmedia-labs"
date-released: "2026-08-13"
url: "https://skillstore.io/skills/genmedia-labs-video-edit/audits/1"
identifiers:
- type: other
value: "skillstore:genmedia-labs-video-edit:audit:1"
description: "Skillstore immutable audit report identifier"
バリアントを比較
インストール可能なバリアント 5 件各作者のスキルは個別のインストール項目として維持されます。推奨バリアントは Skillstore の証拠で順位付けされます。
このバリアントが首位の理由
Skillstore での利用が多い
作者 / ソース Skillstore スコア 証拠の信頼度 Skillstore 利用状況 更新済み
runcomfy-com 推奨
runcomfy-com-video-edit
Skillstore スコア 78
証拠の信頼度 高
Skillstore 利用状況 51
更新済み
2026-09-09
agentspace-so-video-edit
Skillstore スコア 78
証拠の信頼度 高
Skillstore 利用状況 44
更新済み
2026-09-09
skills-collective-video-edit
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 37
更新済み
2026-09-09
genmedia-labs-video-edit
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 30
更新済み
2026-09-09
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠
作成できるもの
Polish Product Videos
Replace packaging or backgrounds while preserving framing, hand movement, camera motion, and source audio.
Transfer Character Motion
Map movement from a reference clip onto a target character while maintaining visual identity.
Restyle Short Social Clips
Change outfits, lighting, or atmosphere while preserving faces, poses, and motion.
これらのプロンプトを試す
Simple Background Change
Edit {video_url}. Preserve the subject's face, pose, motion, and audio. Change only the background to {background_description}.Reference Packaging Swap
Use {reference_image_url} to replace the package design in {video_url}. Preserve framing, hand movement, camera motion, and original audio.Character Motion Transfer
Transfer motion from {motion_video_url} to the character in {character_image_url}. Keep the character identity and {sound_preference}.Constrained Restyle
Restyle {video_url} with {single_visual_change}. Preserve {identity_features}, {motion_features}, framing, and aspect ratio. Use {resolution} and seed {seed}.ベストプラクティス
- State preservation requirements before the requested visual change.
- Request one edit direction per run to reduce temporal drift.
- Use reference media only when a specific appearance or motion must transfer.
回避
- Do not combine unrelated outfit, background, lighting, and character changes in one request.
- Do not send confidential media without approval for third-party processing.
- Do not interpolate untrusted prompts or URLs directly into shell command strings.
よくある質問
Which model handles general video edits?
Wan 2.7 Edit-Video is the default for restyling, background changes, packaging swaps, and commercial polish.
Which model transfers motion from another video?
Kling 2.6 Pro Motion Control maps motion from a reference clip onto a target character.
Which model is suitable for outfit swaps?
Lucy Edit Restyle handles localized outfit, lighting, and atmospheric changes with identity preservation.
Can the skill preserve source audio?
Wan supports original audio, and Kling can retain reference sound. Available audio controls depend on the selected route.
Does processing occur locally?
No. The local CLI submits jobs to RunComfy, where prompts and referenced media are processed remotely.
What output limits apply?
Wan supports short clips up to 1080p, Kling supports route-dependent durations, and Lucy is limited to 720p without aspect control.
開発者情報
作成者
genmedia-labsライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
リポジトリ
https://github.com/genmedia-labs/skills/tree/9f1b4c229cb9e0c962f11ef24c8c87d5f004f393/video-edit参照
68046dfc1c93b48a04e43344644ad77d3a895012
メンテナンスの新しさ
2026/8/13
利用状況
0 ダウンロード · 0 閲覧
ファイル構成
📄 SKILL.md