📦

sound-effects

Name: sound-effects
Author: barty-bart

Ревизия содержимого r1 Безопасно 📁 Доступ к файловой системе⚡ Содержит скрипты⚙️ Внешние команды🌐 Доступ к сети

Add Measured Sound Effects to Motion Graphics

Motion-graphics videos need synchronized sound effects and consistent audio levels. This skill combines recorded effects, beat checks, exported loudness measurements, and reports for human review.

Поддерживает: Claude Codex Code(CC)

📊 76 Адекватно

Maintain this Skill? Claim it 📊 76 Адекватно

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "sound-effects" from https://skillstore.io/skills/barty-bart-sound-effects.md and its manifest at https://skillstore.io/api/skills/barty-bart-sound-effects/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/barty-bart-sound-effects.md Подписанный manifest GET /api/skills/barty-bart-sound-effects/manifest Подписанный lockfile GET /api/skills/barty-bart-sound-effects/lockfile

Протестировать

Использование «sound-effects». Plan sound effects for a silent product demo before choosing music.

Ожидаемый результат:

Proposed cues: a quiet click for the button, a pop for the card, and an impact for the final reveal.
Music selection and publication use case remain unconfirmed.
No audio quality or loudness result is claimed before rendering and measurement.

Использование «sound-effects». Describe the deliverables from a completed sound pass.

Ожидаемый результат:

Video with mixed audio, an interactive cue report, and a beat-grid plot.
Cue frames and waveform checks, a measurement log, and up to five timestamps for headphone review.
A credits list with music details and warnings for unconfirmed licenses.

Использование «sound-effects». Replace an effect selected in the HTML report.

Ожидаемый результат:

The report exports selected alternatives into a swap file.
A new run applies those selections, rebuilds the video, and updates measurements and credits.

Аудит безопасности

Безопасно

v1 • 20.10.2026 Открыть версионный отчет

Reviewed all 400 supplied findings; most are benign documentation, attribution metadata, JSON escaping, and authorized media operations. Predictable temporary files are confirmed risks; unchecked eval remains conservatively confirmed without demonstrated media-only code injection. No evidence found of prompt injection or exfiltration; 77 omitted static matches still require manual review before automatic publication. Static review was capped at 400/477 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Просканировано файлов

2,390

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Пункты проверки возможностей (4)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий

scripts/sound_pass.py:24

Dynamic code evaluation with eval()

fps=eval(run(['ffprobe','-v','error','-select_streams','v:0','-show_entries','stream=r_frame_rate','

eval executes unchecked ffprobe output as Python instead of parsing a frame-rate ratio. Normal output is numeric; no media-only injection was demonstrated, so this remains conservatively confirmed.

Средний

scripts/sound_pass.py:125

Temp directory access

run(['ffmpeg','-y','-v','error','-i',f'{A.out}/after.mp4','-ac','1','-ar',str(SR),'/tmp/after_audio.

FFmpeg overwrites a predictable shared temporary audio filename without private allocation or cleanup. Concurrent runs can corrupt results; permissive temporary-file access can expose extracted audio.

Средний

scripts/sound_pass.py:128

Temp directory access

run(['ffmpeg','-y','-v','error','-ss',f"{max(0,c['t']+dt):.3f}",'-i',f'{A.out}/after.mp4','-frames:v

Cue frames use predictable shared temporary filenames with overwrite enabled. Concurrent runs or preexisting links can redirect or corrupt writes where filesystem protections permit.

Средний

scripts/sound_pass.py:130

Temp directory access

for j,tag in enumerate('ab'): ax[j].imshow(plt.imread(f'/tmp/cue{k}{tag}.png')); ax[j].axis('off');

The report reads cue frames from predictable shared temporary names without verifying ownership or isolation. Another run or local process can substitute frames and invalidate review evidence.

Факторы риска

📁 Доступ к файловой системе (10)

README.md:3 scripts/sound_pass.py:4 scripts/sound_pass.py:125 scripts/sound_pass.py:128 scripts/sound_pass.py:130 scripts/sound_pass.py:154 scripts/sound_pass.py:168 scripts/sound_pass.py:20 scripts/sound_pass.py:57 scripts/sound_pass.py:64

⚡ Содержит скрипты (1)

scripts/sound_pass.py:24

⚙️ Внешние команды (46)

🌐 Доступ к сети (50)

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/barty-bart-sound-effects/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/barty-bart-sound-effects/security.svg)](https://skillstore.io/skills/barty-bart-sound-effects?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/barty-bart-sound-effects?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barty-bart-sound-effects/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/barty-bart-sound-effects.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

barty-bart. (2026). sound-effects security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barty-bart-sound-effects/audits/1

Цитата BibTeX

@techreport{barty-bart-barty-bart-sound-effects-2026,
  author = {barty-bart},
  title = {sound-effects security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/barty-bart-sound-effects/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "sound-effects security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "barty-bart"
date-released: "2026-10-20"
url: "https://skillstore.io/skills/barty-bart-sound-effects/audits/1"
identifiers:
  - type: other
    value: "skillstore:barty-bart-sound-effects:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Score a Product Demo

Add clicks, appearances, transitions, and reveals to an existing product animation, then inspect cue timing and measured audio levels.

Prepare a Social Video

Select recorded effects and music for a social video, verify publication permissions, and generate source credits.

Review a Client Sound Pass

Compare sound alternatives in an HTML report, export selections, and rerun the mix with stable cue indices.

Попробуйте эти промпты

Plan a First Sound Pass

Review my silent motion-graphics video and propose a cue list using the default sound kit. Ask about music licensing and publication before exporting.

Mix a Supplied Track

Add sound effects to this silent video using my licensed music track. Check beat alignment, measure exported loudness, and provide listening timestamps.

Revise Sound Choices

Apply my exported swap selections to the previous sound pass. Keep cue indices stable, regenerate the report, and recheck loudness and credits.

Audit a Final Sound Pass

Review this sound pass for a client release using only sounds whose licenses allow the publication use case. Report timing errors, exported loudness, mono measurements, and unresolved issues.

Лучшие практики

Confirm the publication use case and current source licenses before exporting the final video.
Inspect exported MP4 measurements and cue plots, then listen to the suggested timestamps with headphones.
Use trusted manifests and media in an isolated workspace; avoid concurrent runs until temporary-file handling is fixed.

Избегать

Treating beat plots or loudness measurements as proof that a mix sounds good.
Running the script on a video with essential original audio without a separate preservation plan.
Committing runtime Mixkit downloads or assuming every listed license permits every distribution format.

Часто задаваемые вопросы

What software does this skill require?

It requires Python 3.10+, FFmpeg, librosa, soundfile, numpy, scipy, and matplotlib. Runtime downloads also use curl.

Does it generate synthetic sounds or music?

No. It uses recorded sound files and a supplied or selected music track.

Can it work without an internet connection?

Local mixing can use bundled sounds and local music. Default typing, other runtime sounds, and current license checks require network access.

Are all sounds licensed for every use?

No. Bundled sounds are listed as CC0, while runtime Mixkit assets have restrictions. Confirm current terms for your publication use case.

Does the script preserve existing voiceover?

No. It maps video from the source and audio from the new mix. Preserve voiceover separately before using the script.

Does it guarantee professional audio quality?

No. It targets measurable loudness and timing goals but still requires human listening. Review final measurements because export attempts are limited.