スキル souldub-video-translate

📦

souldub-video-translate

Name: souldub-video-translate
Author: gravityvortex

コンテンツリビジョン r1 安全 🌐 ネットワークアクセス🔑 環境変数⚙️ 外部コマンド📁 ファイルシステムへのアクセス

Translate and Dub MP4 Videos with SoulDub

Video localization requires coordinated uploads, dubbing tasks, and subtitle downloads. This skill automates SoulDub translation workflows and tracks progress across long-running jobs.

対応: Claude Codex Code(CC)

🥉 79 ブロンズ

Maintain this Skill? Claim it 🥉 79 ブロンズ

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "souldub-video-translate" from https://skillstore.io/skills/gravityvortex-souldub-video-translate.md and its manifest at https://skillstore.io/api/skills/gravityvortex-souldub-video-translate/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/gravityvortex-souldub-video-translate.md 署名済み manifest GET /api/skills/gravityvortex-souldub-video-translate/manifest 署名済み lockfile GET /api/skills/gravityvortex-souldub-video-translate/lockfile

テストする

「souldub-video-translate」を使用しています。 Translate an approved local MP4 into Spanish after correcting the API endpoint.

期待される結果:

Illustrative success: Translation completed.
Translated video: result.mp4
Target-language subtitles: translated.srt
Bilingual subtitles: bilingual.srt
The completion response also provides the output directory and saved state path.

「souldub-video-translate」を使用しています。 Retry downloads for a completed translation when video retrieval fails.

期待される結果:

Illustrative partial result: Subtitle files were saved, but video retrieval failed after retries.
The existing task remains available through its saved state.
Continue downloading from that state without uploading again.

セキュリティ監査

安全

v1 • 2026/10/18 バージョン別レポートを開く

Most alerts match Markdown formatting, service identifiers, documented authentication, or expected translation traffic. Confirmed risks include credentials sent to an unrelated fallback host and predictable temporary log paths vulnerable to local symlink attacks. No evidence found of prompt injection or deliberate credential theft in the reviewed files.

スキャンされたファイル

2,596

解析済み行数

レビュー項目

誤検知を無視

機能レビュー項目 (9)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高

scripts/video_translation.py:546

HTTP client library

response = self.session.request(method, url, headers=self.headers(extra_headers), timeout=60, **kwar

Requests attach the API key to an unvalidated api_base. First-use configuration can override the valid bundled endpoint with xxx.com, sending the bearer credential there.

高

scripts/video_translation.py:36

Hardcoded URL

DEFAULT_API_BASE = "https://xxx.com/api/v1"

The active fallback is https://xxx.com/api/v1, not the bundled SoulDub endpoint. Authentication setup persists this fallback, enabling subsequent credential-bearing requests to that unrelated host.

高

scripts/video_translation.py:816

Configuration library

client = SoulDubClient(str(config.get("api_base") or DEFAULT_API_BASE), api_key, state)

This constructs an authenticated client from the merged API base without destination validation. Generated user configuration overrides the valid bundled endpoint with xxx.com.

高

scripts/video_translation.py:841

Configuration library

client = SoulDubClient(str(config.get("api_base") or DEFAULT_API_BASE), api_key, state)

This constructs an authenticated client from the merged API base without destination validation. Generated user configuration overrides the valid bundled endpoint with xxx.com.

高

scripts/video_translation.py:534

Generic API/secret keys

"Authorization": f"Bearer {self.api_key}",

This attaches the bearer key to every configured API destination. The generated user configuration selects xxx.com, so ordinary setup can disclose the credential outside SoulDub.

高

scripts/video_translation.py:816

Generic API/secret keys

client = SoulDubClient(str(config.get("api_base") or DEFAULT_API_BASE), api_key, state)

This constructs an authenticated client from the merged API base without destination validation. Generated user configuration overrides the valid bundled endpoint with xxx.com.

高

scripts/video_translation.py:841

Generic API/secret keys

client = SoulDubClient(str(config.get("api_base") or DEFAULT_API_BASE), api_key, state)

This constructs an authenticated client from the merged API base without destination validation. Generated user configuration overrides the valid bundled endpoint with xxx.com.

高

SKILL.md:64

Hardcoded URL

api_base: "https://xxx.com/api/v1"

The actionable user configuration example selects xxx.com beside the API key field. Copying it routes authenticated requests outside SoulDub instead of using the bundled endpoint.

中

scripts/background_translate.py:70

Temp file creation

control_dir = Path(tempfile.gettempdir()) / "souldub-video-translate" / "background" / safe_run_name

Logs use a predictable shared temporary path, exist_ok=True, and ordinary write-mode opens. Another local user can precreate symlinks to redirect or truncate writable files.

リスク要因

🌐 ネットワークアクセス (21)

🔑 環境変数 (50)

⚙️ 外部コマンド (50)

scripts/background_translate.py:95 scripts/video_translation.py:80 scripts/video_translation.py:147 SKILL.md:11 SKILL.md:17 SKILL.md:18 SKILL.md:22 SKILL.md:23 SKILL.md:25 SKILL.md:29-34 SKILL.md:34-36 SKILL.md:36 SKILL.md:44-46 SKILL.md:46-50 SKILL.md:50-52 SKILL.md:52-54 SKILL.md:54 SKILL.md:58-59 SKILL.md:59-63 SKILL.md:63-66 SKILL.md:66-72 SKILL.md:72-74 SKILL.md:74-78 SKILL.md:78-80 SKILL.md:80-82 SKILL.md:82 SKILL.md:85-86 SKILL.md:86-87 SKILL.md:87-88 SKILL.md:88-89 SKILL.md:89 SKILL.md:94-96 SKILL.md:96-100 SKILL.md:100-102 SKILL.md:102-106 SKILL.md:106-108 SKILL.md:108-110 SKILL.md:110 SKILL.md:118 SKILL.md:120 SKILL.md:121 SKILL.md:127-137 SKILL.md:137-143 SKILL.md:143-145 SKILL.md:145-147 SKILL.md:147-149 SKILL.md:149-151 SKILL.md:151-153 SKILL.md:153-155 SKILL.md:155

📁 ファイルシステムへのアクセス (6)

scripts/background_translate.py:14 scripts/background_translate.py:70 SKILL.md:51 SKILL.md:59 SKILL.md:51 SKILL.md:59

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/gravityvortex-souldub-video-translate/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/gravityvortex-souldub-video-translate/security.svg)](https://skillstore.io/skills/gravityvortex-souldub-video-translate?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/gravityvortex-souldub-video-translate?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gravityvortex-souldub-video-translate/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/gravityvortex-souldub-video-translate.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

gravityvortex. (2026). souldub-video-translate security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/gravityvortex-souldub-video-translate/audits/1

BibTeX形式の引用

@techreport{gravityvortex-gravityvortex-souldub-video-translate-2026,
  author = {gravityvortex},
  title = {souldub-video-translate security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/gravityvortex-souldub-video-translate/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "souldub-video-translate security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "gravityvortex"
date-released: "2026-10-18"
url: "https://skillstore.io/skills/gravityvortex-souldub-video-translate/audits/1"
identifiers:
  - type: other
    value: "skillstore:gravityvortex-souldub-video-translate:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Localize educational videos

Translate recorded lessons and obtain bilingual subtitles for review before distribution.

Dub product demonstrations

Create localized product videos while tracking long-running translation jobs.

Recover translation deliverables

Find saved client runs and retry result downloads without submitting another billable translation task.

これらのプロンプトを試す

Check readiness

Check authentication readiness and validate Spanish as a target language. Identify endpoint safety problems without uploading a video or exposing credentials.

Translate one video

Translate [absolute MP4 path] into Spanish with automatic source detection. Confirm the SoulDub endpoint and upload permission before starting.

Track a background dubbing job

Dub [absolute MP4 path] from English into Japanese with two speakers. Verify endpoint safety, start in the background, and report meaningful progress changes.

Recover completed results

Inspect [saved state path] and verify the configured SoulDub endpoint. Retry result downloads without creating a task, then report subtitle and video outcomes separately.

ベストプラクティス

Correct and verify the SoulDub API endpoint before supplying credentials; avoid shared environments until temporary log handling is hardened.
Confirm permission to upload the video and use its speakers' voices before creating a translation task.
Retain the saved state path and review translated subtitles and audio before publishing results.

回避

Copying the current xxx.com configuration example or placing API keys in prompts and shared logs.
Uploading confidential recordings or using speakers' voices without appropriate permission.
Creating another translation task solely because a completed result download failed.

よくある質問

Which video files are supported?

The helper accepts local MP4 files up to 5 GiB. Rounded duration must be between 1 and 1800 seconds.

Do I need a SoulDub account and credits?

Yes. You need an API key and sufficient credits. Task creation consumes credits according to the service configuration.

Is the current configuration ready to use?

No. Generated configuration can select xxx.com instead of SoulDub. Correct the endpoint before adding credentials, and harden temporary log creation.

Can I choose languages by name?

Yes. The helper recognizes registered English and Chinese names or language codes. Source detection can be automatic, but the target must be explicit.

What files does a successful job download?

By default, it saves result.mp4, translated.srt, and bilingual.srt. Existing destination names receive numeric suffixes to avoid silent overwrites.

Can I recover results after a download failure?

Yes. Continue downloading with the saved state file. The helper refreshes temporary media URLs without creating another translation task.