스킬 videocut
📦
videocut
콘텐츠 리비전 r3 치명적 ⚙️ 외부 명령어📁 파일 시스템 접근⚡ 스크립트 포함🌐 네트워크 접근🔑 환경 변수
타임스탬프 컷으로 음성 동영상 정리
음성 동영상에는 실수, 군말, 긴 무음 구간이 자주 포함됩니다. 이 스킬은 확인된 타임스탬프 편집을 FFmpeg로 적용하고 전사를 통해 결과를 확인합니다.
지원: Claude Codex Code(CC)
이 Skill을 자동으로 설치하지 마세요.
공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "videocut" from https://skillstore.io/skills/ceeon-videocut.md and its manifest at https://skillstore.io/api/skills/ceeon-videocut/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"videocut" 사용 중입니다. 확인된 작업 목록에 발화 실수 세 개와 긴 무음 구간 두 개가 삭제 대상으로 표시되어 있습니다.
예상 결과:
이 스킬은 새로 편집된 동영상 버전, 확인용 전사본, SRT 자막 파일을 생성합니다.
"videocut" 사용 중입니다. 사용자가 선택된 다른 모든 범위는 삭제하면서 무음 항목 두 개는 유지해 달라고 요청합니다.
예상 결과:
최종 컷은 요청된 일시 정지를 보존하고 승인된 타임스탬프 범위만 제거합니다.
"videocut" 사용 중입니다. 검토 패스에서 첫 번째 컷 이후 남아 있는 군말 하나를 발견합니다.
예상 결과:
워크플로는 새 삭제 작업을 만들고 사용자 확인 후 편집을 반복합니다.
보안 감사
치명적v9 • 2026. 7. 23. 버전별 보고서 열기
Most alerts are false positives from Markdown examples, JavaScript template literals, expected media I/O, fixed relative paths, and Chinese text entropy. Confirmed risks include shell injection, an unauthenticated traversal-prone review server, generated-page script injection, arbitrary URL fetching, and external audio and credential handling. Publication should wait until the high-risk execution and server issues are fixed.
19
스캔된 파일
3,676
분석된 줄 수
41
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (4)
치명적
scripts/review_server.js:35-40scripts/review_server.js:47-139scripts/review_server.js:142-181scripts/review_server.js:370
Unauthenticated Review Server Exposes Files and Cut Operations
The server allows any origin, maps request URLs directly to filesystem paths, and exposes unauthenticated write and cut endpoints. Its unspecified listen host can expose traversal-based file reads and expensive edits to network peers.
The code has permissive CORS, no authentication, no path canonicalization, and no loopback host restriction. The exposed handlers perform file writes and invoke media processing.
높음
Environment file access
ENV_FILE="$(dirname "$(dirname "$SCRIPT_DIR")")/.env"
The script resolves and uses a shared .env file outside its own directory. It later reads VOLCENGINE_API_KEY from that credential file.
높음
Generated Review Page Allows Script Injection
The generator inserts the video filename and serialized transcript data directly into HTML and an inline script without HTML-safe escaping. Crafted input can close the script or markup context and execute JavaScript.
The direct template interpolation is visible and JSON.stringify does not escape the HTML script-closing sequence. Both filename and transcript files are caller-controlled inputs.
높음
Arbitrary Audio URL Fetch Enables SSRF and Reupload
The transcription script accepts any HTTP or HTTPS URL, follows redirects, and applies no destination restrictions. It then sends the downloaded content to Volcengine, enabling access to internal URLs and external disclosure.
The URL is accepted from the first argument and passed to curl with redirect following. The resulting file is base64-encoded and submitted to a third-party endpoint.
기능 검토 항목 (41)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
높음
Shell command substitution
TOTAL_SEGS=$(node -e "
The command substitution builds Node source containing the caller-controlled deletion-list path and ffprobe output. A path containing quotes can escape the JavaScript string and execute code.
높음
Unix shell invocation
const script = '#!/bin/bash\nffmpeg -y -v error' +
This generated shell script embeds the input video path without shell escaping and is later executed with bash. A crafted filename can break the quoted argument and inject commands.
높음
Node.js fs operations
const deleteSegs = JSON.parse(fs.readFileSync('$DELETE_JSON', 'utf8'));
The deletion-list path is interpolated directly into Node source rather than passed as an argument. Quote characters in the path create a code-injection path.
높음
Node.js fs operations
fs.writeFileSync('$TMP_DIR/cmd_' + padded + '.sh', script);
The file operation writes executable shell scripts whose command text contains an unescaped input video path. Those files are executed later, making crafted filenames dangerous.
높음
Synchronous file operations
const deleteSegs = JSON.parse(fs.readFileSync('$DELETE_JSON', 'utf8'));
The synchronous read is expressed inside dynamically constructed Node source with an unescaped caller-controlled path. This can become JavaScript code execution.
높음
Synchronous file operations
fs.writeFileSync('$TMP_DIR/cmd_' + padded + '.sh', script);
This write persists generated shell commands containing an unescaped video path. The later bash execution turns malformed filenames into a command-injection risk.
높음
Node.js child_process module
const { execSync } = require('child_process');
The server imports child_process and later builds shell command strings from the video path. Because the path can be caller-controlled, the module enables command injection in request-triggered work.
높음
Synchronous process execution
execSync(`bash "${scriptPath}" "${VIDEO_FILE}" delete_segments.json "${outputFile}"`, {
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
높음
Synchronous process execution
const originalDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
높음
Synchronous process execution
const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
높음
Synchronous process execution
audioOffset = parseFloat(execSync(`ffprobe -v error -show_entries format=start_time -of csv=p=0 "${a
execSync receives a command string containing a workspace-derived path. A quote or shell metacharacter in that path can alter the command.
높음
Synchronous process execution
const duration = parseFloat(execSync(probeCmd).toString().trim());
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
높음
Synchronous process execution
execSync(cmd, { stdio: 'pipe' });
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
높음
Synchronous process execution
const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
높음
Synchronous process execution
execSync(cmd, { stdio: 'pipe' });
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
높음
Synchronous process execution
execSync(concatCmd, { stdio: 'pipe' });
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
높음
Ruby/shell backtick execution
execSync(`bash "${scriptPath}" "${VIDEO_FILE}" delete_segments.json "${outputFile}"`, {
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
높음
Ruby/shell backtick execution
const originalDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
높음
Ruby/shell backtick execution
const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
높음
Ruby/shell backtick execution
audioOffset = parseFloat(execSync(`ffprobe -v error -show_entries format=start_time -of csv=p=0 "${a
This JavaScript template literal constructs a shell command with a workspace-derived path and then passes it to execSync. A specially named directory can inject shell syntax.
높음
Ruby/shell backtick execution
const probeCmd = `ffprobe -v error -show_entries format=duration -of csv=p=0 "file:${input}"`;
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
높음
Ruby/shell backtick execution
const cmd = `ffmpeg -y -i "file:${input}" -filter_complex "${filterComplex}" -map "[outv]" -map "[ou
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
높음
Ruby/shell backtick execution
const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
높음
Ruby/shell backtick execution
const cmd = `ffmpeg -y -ss ${seg.start.toFixed(3)} -i "file:${input}" -t ${segDuration.toFixed(3)} -
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
높음
Ruby/shell backtick execution
const concatCmd = `ffmpeg -y -f concat -safe 0 -i "${listFile}" -c copy "${output}"`;
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
높음
Node.js fs operations
fs.writeFileSync('saved_selection.json', body);
An unauthenticated HTTP endpoint accepts an unbounded request body and writes it to a fixed workspace file. Network clients can overwrite review state and consume memory or disk.
높음
Node.js fs operations
fs.writeFileSync('delete_segments.json', JSON.stringify(deleteList, null, 2));
The unauthenticated cut endpoint writes attacker-supplied deletion ranges and immediately starts media processing. Any reachable client can alter output and trigger expensive work.
높음
Node.js fs stat operations
if (!fs.existsSync(filePath)) {
The server applies the request URL directly to a relative filesystem path without canonicalization or root containment. Traversal sequences can make the stat operation target files outside the review directory.
높음
Node.js fs stat operations
const stat = fs.statSync(filePath);
The server applies the request URL directly to a relative filesystem path without canonicalization or root containment. Traversal sequences can make the stat operation target files outside the review directory.
높음
Synchronous file operations
fs.writeFileSync('saved_selection.json', body);
An unauthenticated HTTP endpoint accepts an unbounded request body and writes it to a fixed workspace file. Network clients can overwrite review state and consume memory or disk.
높음
Synchronous file operations
fs.writeFileSync('delete_segments.json', JSON.stringify(deleteList, null, 2));
The unauthenticated cut endpoint writes attacker-supplied deletion ranges and immediately starts media processing. Any reachable client can alter output and trigger expensive work.
높음
File stream creation
fs.createReadStream(filePath, { start, end }).pipe(res);
The stream serves a path derived directly from req.url without enforcing the review directory as a root. A traversal request can disclose arbitrary readable local files.
높음
File stream creation
fs.createReadStream(filePath).pipe(res);
The stream serves a path derived directly from req.url without enforcing the review directory as a root. A traversal request can disclose arbitrary readable local files.
높음
Hardcoded URL
SUBMIT_URL="https://openspeech.bytedance.com/api/v3/auc/bigmodel/submit"
This endpoint receives the user audio and API key over HTTPS as part of transcription. The transfer is intentional but is a real external data-disclosure boundary.
높음
Hardcoded URL
QUERY_URL="https://openspeech.bytedance.com/api/v3/auc/bigmodel/query"
This endpoint is polled with the API key to retrieve transcription results. It is an intentional third-party network dependency with credential exposure.
높음
Node.js fs operations
data: fs.readFileSync(audioFile).toString('base64'),
The script reads the complete audio file and base64-encodes it into a request sent to Volcengine. This is intentional, but user media leaves the local environment.
높음
Synchronous file operations
data: fs.readFileSync(audioFile).toString('base64'),
The script reads the complete audio file and base64-encodes it into a request sent to Volcengine. This is intentional, but user media leaves the local environment.
높음
Hidden file access
ENV_FILE="$(dirname "$(dirname "$SCRIPT_DIR")")/.env"
The script locates a shared ancestor .env file and later extracts a live API key from it. This is real access to hidden credential storage.
높음
Generic API/secret keys
API_KEY=$(grep '^VOLCENGINE_API_KEY=' "$ENV_FILE" | tail -1 | cut -d'=' -f2- | tr -d '"' | tr -d "'"
This line reads VOLCENGINE_API_KEY from the shared .env file into process memory. The access is required for transcription but handles a live secret.
높음
Generic API/secret keys
-H "X-Api-Key: $API_KEY" \
The API key is placed in an outbound X-Api-Key header to the configured Volcengine endpoint. This is expected authentication but remains credential disclosure to a third party.
높음
Generic API/secret keys
-H "X-Api-Key: $API_KEY" \
The API key is placed in an outbound X-Api-Key header to the configured Volcengine endpoint. This is expected authentication but remains credential disclosure to a third party.
위험 요인
⚙️ 외부 명령어 (50)
scripts/cut_video.sh:32 scripts/cut_video.sh:33 scripts/cut_video.sh:34 scripts/cut_video.sh:35 scripts/cut_video.sh:37 scripts/cut_video.sh:38 scripts/cut_video.sh:39 scripts/cut_video.sh:46 scripts/cut_video.sh:50 scripts/cut_video.sh:59-60 scripts/cut_video.sh:143 scripts/cut_video.sh:146 scripts/cut_video.sh:147 scripts/cut_video.sh:174 scripts/cut_video.sh:175 scripts/cut_video.sh:176 scripts/cut_video.sh:1 scripts/cut_video.sh:120 scripts/detect_en_stutter.js:43 scripts/detect_en_stutter.js:44 scripts/detect_en_stutter.js:47 scripts/generate_review.js:11 scripts/generate_review.js:42 scripts/generate_review.js:50 scripts/generate_review.js:59-919 scripts/generate_review.js:919-926 scripts/generate_review.js:926-927 scripts/generate_review.js:927-1027 scripts/generate_review.js:1032-1159 scripts/generate_review.js:1159-1332 scripts/generate_review.js:1332-1394 scripts/generate_review.js:1394 scripts/generate_review.js:1396-1410 scripts/generate_review.js:1410-1415 scripts/generate_review.js:1415-1420 scripts/generate_review.js:1420-1442 scripts/generate_review.js:1442-1479 scripts/generate_srt_for_video.sh:62 scripts/generate_srt_for_video.sh:67 scripts/generate_srt_for_video.sh:71 scripts/generate_srt_for_video.sh:30 scripts/generate_srt_for_video.sh:1 scripts/review_server.js:16 scripts/review_server.js:107 scripts/review_server.js:114 scripts/review_server.js:115 scripts/review_server.js:208 scripts/review_server.js:242 scripts/review_server.js:251 scripts/review_server.js:326
📁 파일 시스템 접근 (50)
scripts/cut_video.sh:61 scripts/cut_video.sh:102 scripts/cut_video.sh:103 scripts/cut_video.sh:118 scripts/cut_video.sh:130 scripts/cut_video.sh:61 scripts/cut_video.sh:102 scripts/cut_video.sh:103 scripts/cut_video.sh:118 scripts/cut_video.sh:130 scripts/cut_video.sh:145 scripts/cut_video.sh:46 scripts/detect_en_stutter.js:18 scripts/detect_en_stutter.js:18 scripts/detect_en_stutter.js:20 scripts/generate_review.js:21 scripts/generate_review.js:22 scripts/generate_review.js:31 scripts/generate_review.js:35 scripts/generate_review.js:1481 scripts/generate_review.js:19 scripts/generate_review.js:21 scripts/generate_review.js:26 scripts/generate_review.js:34 scripts/generate_review.js:40 scripts/generate_review.js:31 scripts/generate_review.js:35 scripts/generate_review.js:1481 scripts/generate_review.js:999 scripts/generate_review.js:22 scripts/generate_srt_for_video.sh:45 scripts/generate_srt_for_video.sh:55 scripts/generate_srt_for_video.sh:70 scripts/generate_srt_for_video.sh:45 scripts/generate_srt_for_video.sh:55 scripts/generate_srt_for_video.sh:70 scripts/generate_srt_for_video.sh:55 scripts/generate_srt_for_video.sh:70 scripts/generate_srt_for_video.sh:71 scripts/generate_subtitles.js:19 scripts/generate_subtitles.js:59 scripts/generate_subtitles.js:140 scripts/generate_subtitles.js:14 scripts/generate_subtitles.js:58 scripts/generate_subtitles.js:19 scripts/generate_subtitles.js:59 scripts/generate_subtitles.js:140 scripts/review_server.js:22 scripts/review_server.js:53 scripts/review_server.js:68
⚡ 스크립트 포함 (5)
🌐 네트워크 접근 (12)
scripts/generate_review.js:1279 scripts/generate_review.js:1289 scripts/generate_review.js:1427 scripts/generate_review.js:1484 scripts/review_server.js:373 scripts/volcengine_transcribe.sh:7 scripts/volcengine_transcribe.sh:17 scripts/volcengine_transcribe.sh:18 scripts/volcengine_transcribe.sh:19 SKILL.md:5 SKILL.md:362 SKILL.md:515
🔑 환경 변수 (10)
scripts/volcengine_transcribe.sh:23 scripts/volcengine_transcribe.sh:29 scripts/volcengine_transcribe.sh:49 scripts/volcengine_transcribe.sh:54 scripts/volcengine_transcribe.sh:56 scripts/volcengine_transcribe.sh:57 scripts/volcengine_transcribe.sh:58 scripts/volcengine_transcribe.sh:140 scripts/volcengine_transcribe.sh:166 SKILL.md:530
감사자: codex 감사 이력 보기 →
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/ceeon-videocut/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/ceeon-videocut?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/ceeon-videocut?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ceeon-videocut/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/ceeon-videocut.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
chengfeng / AI产品自由. (2026). videocut security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/ceeon-videocut/audits/9BibTeX 인용
@techreport{chengfeng-ai-ceeon-videocut-2026,
author = {chengfeng / AI产品自由},
title = {videocut security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/ceeon-videocut/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "videocut security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "chengfeng / AI产品自由"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/ceeon-videocut/audits/9"
identifiers:
- type: other
value: "skillstore:ceeon-videocut:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 45
아키텍처
85
유지보수성
87
콘텐츠
69
커뮤니티
78
사양 준수
만들 수 있는 것
크리에이터 토킹 동영상 편집
녹화된 음성 동영상에서 확인된 실수, 군말, 긴 일시 정지를 제거합니다.
강의 클립 준비
학습 자료를 게시하기 전에 강의 녹화본에 정확한 타임스탬프 컷을 적용합니다.
내부 브리핑 정리
거친 회의 또는 브리핑 녹화본을 자막이 포함된 더 깔끔한 클립으로 변환합니다.
이 프롬프트를 사용해 보세요
확인된 컷 실행
videocut을 사용해 이 동영상의 확인된 삭제 작업을 실행하세요. 선택되지 않은 항목은 유지하고 편집된 동영상을 생성하세요.
컷 및 발화 확인
선택된 타임스탬프 범위를 잘라내고, 편집된 파일을 다시 전사한 다음, 발화 실수가 남아 있는지 보고하세요.
선택한 무음 구간 보존
무음 항목 3과 5를 제외하고 선택된 모든 컷을 실행하세요. 해당 일시 정지는 유지한 다음 최종 버전용 자막을 만드세요.
깨끗해질 때까지 반복
현재 삭제 목록을 적용하고, 새 버전을 만들고, 전사 검토를 다시 실행한 뒤, 확인된 새 컷에 대해서만 계속 진행하세요.
모범 사례
- FFmpeg를 실행하기 전에 모든 삭제 범위를 확인하세요.
- 전사 텍스트를 검색하는 대신 타임스탬프 범위를 사용하세요.
- 최종 동영상을 게시하기 전에 편집된 전사본을 검토하세요.
피하기
- 검토 목록에서 선택되지 않은 작업은 삭제하지 마세요.
- 정확한 타임스탬프가 이미 있을 때 텍스트를 다시 검색하지 마세요.
- 사용자 확인 없이 신뢰할 수 없는 경로에서 미디어 명령을 실행하지 마세요.
자주 묻는 질문
이 스킬은 편집 전에 무엇이 필요한가요?
원본 동영상과 검토 워크플로에서 나온 확인된 타임스탬프 삭제 목록이 필요합니다.
자막을 생성하나요?
예. 워크플로는 편집된 동영상이 검토를 통과한 후 SRT 자막 파일을 생성합니다.
삭제 여부를 자동으로 결정할 수 있나요?
아니요. 이 스킬은 삭제를 단독으로 승인하는 것이 아니라, 확인된 삭제 작업을 실행하도록 설계되었습니다.
어떤 도구를 사용하나요?
컷에는 FFmpeg를 사용하고, 전사 및 타임스탬프 확인에는 FunASR을 사용합니다.
타임스탬프가 왜 중요한가요?
타임스탬프는 반복된 단어나 전사 검색 오류로 인한 실수 삭제를 방지합니다.
첫 실행 설정 비용이 있나요?
예. FunASR은 로컬에서 전사가 작동하기 전에 큰 음성 모델을 다운로드할 수 있습니다.