Short-video links often separate useful metadata from spoken content. This skill combines TikHub data queries and Qingdou transcription, then saves transcripts as organized Markdown files.
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "dbs-video-extract" from https://skillstore.io/skills/dontbesilent2025-dbs-video-extract.md and its manifest at https://skillstore.io/api/skills/dontbesilent2025-dbs-video-extract/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.
에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
"dbs-video-extract" 사용 중입니다. Check readiness when only TikHub is configured.
예상 결과:
TikHub credentials are configured. Metadata queries are available; speech transcription requires Qingdou credentials. This local check does not validate authentication, balance, or service availability.
"dbs-video-extract" 사용 중입니다. Illustrative successful extraction of a public video titled Morning Routine by Sample Creator.
예상 결과:
Metadata query: successful. Available author, title, and engagement fields are included in the summary.
Speech transcript: saved under the selected output directory in Sample Creator/Morning Routine.md.
The Markdown file includes source metadata and the returned transcript.
"dbs-video-extract" 사용 중입니다. Illustrative combined extraction where metadata succeeds but transcription reports insufficient resources.
예상 결과:
Partial success: metadata was retained. Qingdou transcription failed because the provider reported insufficient resources. No transcript file was created.
Most static flags reflect documented credential handling, Markdown syntax, or platform identifiers rather than malicious behavior. Confirmed risks concern credential-bearing redirects, HTTP endpoint overrides, and unrestricted URL resolution; seven static locations cover these three issues. No evidence found of malicious intent or prompt injection in the reviewed files.
9
스캔된 파일
2,224
분석된 줄 수
7
검토 항목
0
오탐 무시됨
기능 검토 항목 (7)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
with urllib.request.urlopen(request, timeout=30) as response:
Default urllib redirects retain the x-api-key header across hosts and HTTPS downgrades. A malicious service redirect can disclose the Qingdou credential.
QINGDOU_BASE_URL reaches authenticated requests without HTTPS validation. An HTTP override exposes the API key and submitted share text to network observers.
The combined workflow accepts QINGDOU_BASE_URL without validating its scheme before sending the API key. An HTTP override transmits credentials without TLS.
with urllib.request.urlopen(request, timeout=max(1.0, timeout)) as response:
MCP requests use default redirect handling, which preserves Authorization across origins. A malicious endpoint redirect can disclose the bearer token and session header.
The standalone Douyin command constructs a GET from any extracted HTTP URL before checking its platform. Untrusted share text can target internal services.
with urllib.request.urlopen(request, timeout=max(1.0, timeout)) as response:
The resolver follows redirects without host or private-address checks. Untrusted input or redirect destinations can cause requests to loopback or internal services.
dontbesilent2025. (2026). dbs-video-extract security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dontbesilent2025-dbs-video-extract/audits/1
BibTeX 인용
@techreport{dontbesilent2025-dontbesilent2025-dbs-video-extract-2026,
author = {dontbesilent2025},
title = {dbs-video-extract security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/dontbesilent2025-dbs-video-extract/audits/1},
note = {Author version unspecified}
}
CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "dbs-video-extract security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "dontbesilent2025"
date-released: "2026-10-17"
url: "https://skillstore.io/skills/dontbesilent2025-dbs-video-extract/audits/1"
identifiers:
- type: other
value: "skillstore:dontbesilent2025-dbs-video-extract:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유증거 신뢰도: 중간
68
아키텍처
85
유지보수성
87
콘텐츠
65
커뮤니티
83
사양 준수
만들 수 있는 것
Archive source material
Save spoken content and source metadata from permitted public videos into an organized Markdown research archive.
Inspect short-video performance
Retrieve available engagement statistics and author details without requesting transcription when only metadata is needed.
Review published speech
Extract a transcript from a published video for manual editorial review while retaining the original service output.
이 프롬프트를 사용해 보세요
Check readiness
Check which credentials are configured for dbs-video-extract. Report available capabilities without showing secrets or making network requests.
Extract one transcript
Extract only the speech transcript from [video share text]. Save it under [output directory] and report the resulting Markdown path.
Combine data and speech
Extract metadata and speech from [video share text] into [output directory]. Preserve either successful result if one service fails, and report limitations.
Control extraction and regeneration
Process [Douyin video share text] in combined mode using stdin. Prefer App data with Web fallback, retain raw metadata, and preserve existing transcripts.
모범 사례
Configure credentials through the hidden-input helper and keep keys out of chat, repositories, and logs.
Review provider charges and use only content you are authorized to process.
Pass share text through stdin, keep default HTTPS endpoints, and preserve existing transcripts unless regeneration is explicitly required.
피하기
Treating credential discovery as proof of valid authentication, sufficient balance, or working provider access.
Requesting media downloads, local video rendering, or offline transcription from this extraction skill.
Using untrusted endpoint overrides or assuming arbitrary links and redirects are safe.
자주 묻는 질문
Which platforms support metadata queries?
Dedicated metadata queries support Douyin, Xiaohongshu, and WeChat Channels. Douyin also supports user profile links.
Do I need both provider keys?
No. TikHub enables metadata queries, and Qingdou enables speech transcription. Combined extraction requires both for full results.
Is extraction free?
The skill is free and open source. External providers may charge for queries or transcription according to their current plans.
Where are transcripts saved?
Transcripts are saved as Markdown under the selected output directory, grouped by author and title. Missing authors use a fallback folder.
Will existing transcripts be overwritten?
Existing transcripts for the same source are skipped by default. Overwriting requires an explicit overwrite option.
What happens when one service fails?
The combined workflow retains successful results and reports partial success when one requested service succeeds and another fails.