📦

videocut

Name: videocut
Author: chengfeng / AI产品自由

Ревизия содержимого r3 Критично ⚙️ Внешние команды📁 Доступ к файловой системе⚡ Содержит скрипты🌐 Доступ к сети🔑 Переменные окружения

Очистка разговорных видео с помощью вырезок по временным меткам

Разговорные видео часто содержат ошибки, слова-паразиты и длинные паузы. Этот навык применяет подтвержденные правки по временным меткам с помощью FFmpeg и проверяет результат через транскрибацию.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Maintain this Skill? Claim it ⚠️ 38 Плохо

Не устанавливайте этот Skill автоматически.

Каноническая политика требует проверки оператором перед любым действием по установке.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "videocut" from https://skillstore.io/skills/ceeon-videocut.md and its manifest at https://skillstore.io/api/skills/ceeon-videocut/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/ceeon-videocut.md Подписанный manifest GET /api/skills/ceeon-videocut/manifest Подписанный lockfile GET /api/skills/ceeon-videocut/lockfile

Протестировать

Использование «videocut». В подтвержденном списке задач отмечены три речевые ошибки и две длинные паузы для удаления.

Ожидаемый результат:

Навык создает новую отредактированную версию видео, проверочную транскрипцию и SRT-файл субтитров.

Использование «videocut». Пользователь просит сохранить два элемента тишины, удалив все остальные отмеченные диапазоны.

Ожидаемый результат:

Финальная вырезка сохраняет запрошенные паузы и удаляет только одобренные диапазоны временных меток.

Использование «videocut». Проверочный проход находит одно оставшееся слово-паразит после первой вырезки.

Ожидаемый результат:

Рабочий процесс создает новую задачу на удаление и повторяет редактирование после подтверждения пользователя.

Аудит безопасности

Критично

v9 • 23.07.2026 Открыть версионный отчет

Most alerts are false positives from Markdown examples, JavaScript template literals, expected media I/O, fixed relative paths, and Chinese text entropy. Confirmed risks include shell injection, an unauthenticated traversal-prone review server, generated-page script injection, arbitrary URL fetching, and external audio and credential handling. Publication should wait until the high-risk execution and server issues are fixed.

Просканировано файлов

3,676

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (4)

Критично

scripts/review_server.js:35-40 scripts/review_server.js:47-139 scripts/review_server.js:142-181 scripts/review_server.js:370

Unauthenticated Review Server Exposes Files and Cut Operations

The server allows any origin, maps request URLs directly to filesystem paths, and exposes unauthenticated write and cut endpoints. Its unspecified listen host can expose traversal-based file reads and expensive edits to network peers.

The code has permissive CORS, no authentication, no path canonicalization, and no loopback host restriction. The exposed handlers perform file writes and invoke media processing.

Высокий

scripts/volcengine_transcribe.sh:45

Environment file access

ENV_FILE="$(dirname "$(dirname "$SCRIPT_DIR")")/.env"

The script resolves and uses a shared .env file outside its own directory. It later reads VOLCENGINE_API_KEY from that credential file.

Высокий

scripts/generate_review.js:778 scripts/generate_review.js:879-880

Generated Review Page Allows Script Injection

The generator inserts the video filename and serialized transcript data directly into HTML and an inline script without HTML-safe escaping. Crafted input can close the script or markup context and execute JavaScript.

The direct template interpolation is visible and JSON.stringify does not escape the HTML script-closing sequence. Both filename and transcript files are caller-controlled inputs.

Высокий

scripts/volcengine_transcribe.sh:72-79 scripts/volcengine_transcribe.sh:108-144

Arbitrary Audio URL Fetch Enables SSRF and Reupload

The transcription script accepts any HTTP or HTTPS URL, follows redirects, and applies no destination restrictions. It then sends the downloaded content to Volcengine, enabling access to internal URLs and external disclosure.

The URL is accepted from the first argument and passed to curl with redirect following. The resulting file is base64-encoded and submitted to a third-party endpoint.

Пункты проверки возможностей (41)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий

scripts/cut_video.sh:59-60

Shell command substitution

TOTAL_SEGS=$(node -e "

The command substitution builds Node source containing the caller-controlled deletion-list path and ffprobe output. A path containing quotes can escape the JavaScript string and execute code.

Высокий

scripts/cut_video.sh:120

Unix shell invocation

const script = '#!/bin/bash\nffmpeg -y -v error' +

This generated shell script embeds the input video path without shell escaping and is later executed with bash. A crafted filename can break the quoted argument and inject commands.

Высокий

scripts/cut_video.sh:61

Node.js fs operations

const deleteSegs = JSON.parse(fs.readFileSync('$DELETE_JSON', 'utf8'));

The deletion-list path is interpolated directly into Node source rather than passed as an argument. Quote characters in the path create a code-injection path.

Высокий

scripts/cut_video.sh:130

Node.js fs operations

fs.writeFileSync('$TMP_DIR/cmd_' + padded + '.sh', script);

The file operation writes executable shell scripts whose command text contains an unescaped input video path. Those files are executed later, making crafted filenames dangerous.

Высокий

scripts/cut_video.sh:61

Synchronous file operations

const deleteSegs = JSON.parse(fs.readFileSync('$DELETE_JSON', 'utf8'));

The synchronous read is expressed inside dynamically constructed Node source with an unescaped caller-controlled path. This can become JavaScript code execution.

Высокий

scripts/cut_video.sh:130

Synchronous file operations

fs.writeFileSync('$TMP_DIR/cmd_' + padded + '.sh', script);

This write persists generated shell commands containing an unescaped video path. The later bash execution turns malformed filenames into a command-injection risk.

Высокий

scripts/review_server.js:16

Node.js child_process module

const { execSync } = require('child_process');

The server imports child_process and later builds shell command strings from the video path. Because the path can be caller-controlled, the module enables command injection in request-triggered work.

Высокий

scripts/review_server.js:107

Synchronous process execution

execSync(`bash "${scriptPath}" "${VIDEO_FILE}" delete_segments.json "${outputFile}"`, {

execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.

Высокий

scripts/review_server.js:114

Synchronous process execution

const originalDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv

Высокий

scripts/review_server.js:115

Synchronous process execution

const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0

Высокий

scripts/review_server.js:242

Synchronous process execution

audioOffset = parseFloat(execSync(`ffprobe -v error -show_entries format=start_time -of csv=p=0 "${a

execSync receives a command string containing a workspace-derived path. A quote or shell metacharacter in that path can alter the command.

Высокий

scripts/review_server.js:251

Synchronous process execution

const duration = parseFloat(execSync(probeCmd).toString().trim());

Высокий

scripts/review_server.js:326

Synchronous process execution

execSync(cmd, { stdio: 'pipe' });

Высокий

scripts/review_server.js:329

Synchronous process execution

const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0

Высокий

scripts/review_server.js:352

Synchronous process execution

execSync(cmd, { stdio: 'pipe' });

Высокий

scripts/review_server.js:362

Synchronous process execution

execSync(concatCmd, { stdio: 'pipe' });

Высокий

scripts/review_server.js:107

Ruby/shell backtick execution

execSync(`bash "${scriptPath}" "${VIDEO_FILE}" delete_segments.json "${outputFile}"`, {

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Высокий

scripts/review_server.js:114

Ruby/shell backtick execution

const originalDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Высокий

scripts/review_server.js:115

Ruby/shell backtick execution

const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Высокий

scripts/review_server.js:242

Ruby/shell backtick execution

audioOffset = parseFloat(execSync(`ffprobe -v error -show_entries format=start_time -of csv=p=0 "${a

This JavaScript template literal constructs a shell command with a workspace-derived path and then passes it to execSync. A specially named directory can inject shell syntax.

Высокий

scripts/review_server.js:250

Ruby/shell backtick execution

const probeCmd = `ffprobe -v error -show_entries format=duration -of csv=p=0 "file:${input}"`;

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Высокий

scripts/review_server.js:323

Ruby/shell backtick execution

const cmd = `ffmpeg -y -i "file:${input}" -filter_complex "${filterComplex}" -map "[outv]" -map "[ou

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Высокий

scripts/review_server.js:329

Ruby/shell backtick execution

const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Высокий

scripts/review_server.js:349

Ruby/shell backtick execution

const cmd = `ffmpeg -y -ss ${seg.start.toFixed(3)} -i "file:${input}" -t ${segDuration.toFixed(3)} -

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Высокий

scripts/review_server.js:360

Ruby/shell backtick execution

const concatCmd = `ffmpeg -y -f concat -safe 0 -i "${listFile}" -c copy "${output}"`;

This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.

Высокий

scripts/review_server.js:53

Node.js fs operations

fs.writeFileSync('saved_selection.json', body);

An unauthenticated HTTP endpoint accepts an unbounded request body and writes it to a fixed workspace file. Network clients can overwrite review state and consume memory or disk.

Высокий

scripts/review_server.js:91

Node.js fs operations

fs.writeFileSync('delete_segments.json', JSON.stringify(deleteList, null, 2));

The unauthenticated cut endpoint writes attacker-supplied deletion ranges and immediately starts media processing. Any reachable client can alter output and trigger expensive work.

Высокий

scripts/review_server.js:150

Node.js fs stat operations

if (!fs.existsSync(filePath)) {

The server applies the request URL directly to a relative filesystem path without canonicalization or root containment. Traversal sequences can make the stat operation target files outside the review directory.

Высокий

scripts/review_server.js:156

Node.js fs stat operations

const stat = fs.statSync(filePath);

Высокий

scripts/review_server.js:53

Synchronous file operations

fs.writeFileSync('saved_selection.json', body);

An unauthenticated HTTP endpoint accepts an unbounded request body and writes it to a fixed workspace file. Network clients can overwrite review state and consume memory or disk.

Высокий

scripts/review_server.js:91

Synchronous file operations

fs.writeFileSync('delete_segments.json', JSON.stringify(deleteList, null, 2));

The unauthenticated cut endpoint writes attacker-supplied deletion ranges and immediately starts media processing. Any reachable client can alter output and trigger expensive work.

Высокий

scripts/review_server.js:171

File stream creation

fs.createReadStream(filePath, { start, end }).pipe(res);

The stream serves a path derived directly from req.url without enforcing the review directory as a root. A traversal request can disclose arbitrary readable local files.

Высокий

scripts/review_server.js:181

File stream creation

fs.createReadStream(filePath).pipe(res);

The stream serves a path derived directly from req.url without enforcing the review directory as a root. A traversal request can disclose arbitrary readable local files.

Высокий

scripts/volcengine_transcribe.sh:18

Hardcoded URL

SUBMIT_URL="https://openspeech.bytedance.com/api/v3/auc/bigmodel/submit"

This endpoint receives the user audio and API key over HTTPS as part of transcription. The transfer is intentional but is a real external data-disclosure boundary.

Высокий

scripts/volcengine_transcribe.sh:19

Hardcoded URL

QUERY_URL="https://openspeech.bytedance.com/api/v3/auc/bigmodel/query"

This endpoint is polled with the API key to retrieve transcription results. It is an intentional third-party network dependency with credential exposure.

Высокий

scripts/volcengine_transcribe.sh:111

Node.js fs operations

data: fs.readFileSync(audioFile).toString('base64'),

The script reads the complete audio file and base64-encodes it into a request sent to Volcengine. This is intentional, but user media leaves the local environment.

Высокий

scripts/volcengine_transcribe.sh:111

Synchronous file operations

data: fs.readFileSync(audioFile).toString('base64'),

The script reads the complete audio file and base64-encodes it into a request sent to Volcengine. This is intentional, but user media leaves the local environment.

Высокий

scripts/volcengine_transcribe.sh:45

Hidden file access

ENV_FILE="$(dirname "$(dirname "$SCRIPT_DIR")")/.env"

The script locates a shared ancestor .env file and later extracts a live API key from it. This is real access to hidden credential storage.

Высокий

scripts/volcengine_transcribe.sh:54

Generic API/secret keys

API_KEY=$(grep '^VOLCENGINE_API_KEY=' "$ENV_FILE" | tail -1 | cut -d'=' -f2- | tr -d '"' | tr -d "'"

This line reads VOLCENGINE_API_KEY from the shared .env file into process memory. The access is required for transcription but handles a live secret.

Высокий

scripts/volcengine_transcribe.sh:140

Generic API/secret keys

-H "X-Api-Key: $API_KEY" \

The API key is placed in an outbound X-Api-Key header to the configured Volcengine endpoint. This is expected authentication but remains credential disclosure to a third party.

Высокий

scripts/volcengine_transcribe.sh:166

Generic API/secret keys

-H "X-Api-Key: $API_KEY" \

The API key is placed in an outbound X-Api-Key header to the configured Volcengine endpoint. This is expected authentication but remains credential disclosure to a third party.

Факторы риска

⚙️ Внешние команды (50)

📁 Доступ к файловой системе (50)

⚡ Содержит скрипты (5)

scripts/generate_review.js:895 scripts/generate_review.js:896 scripts/generate_review.js:1017 scripts/generate_review.js:1027 scripts/generate_review.js:1158

🌐 Доступ к сети (12)

scripts/generate_review.js:1279 scripts/generate_review.js:1289 scripts/generate_review.js:1427 scripts/generate_review.js:1484 scripts/review_server.js:373 scripts/volcengine_transcribe.sh:7 scripts/volcengine_transcribe.sh:17 scripts/volcengine_transcribe.sh:18 scripts/volcengine_transcribe.sh:19 SKILL.md:5 SKILL.md:362 SKILL.md:515

🔑 Переменные окружения (10)

scripts/volcengine_transcribe.sh:23 scripts/volcengine_transcribe.sh:29 scripts/volcengine_transcribe.sh:49 scripts/volcengine_transcribe.sh:54 scripts/volcengine_transcribe.sh:56 scripts/volcengine_transcribe.sh:57 scripts/volcengine_transcribe.sh:58 scripts/volcengine_transcribe.sh:140 scripts/volcengine_transcribe.sh:166 SKILL.md:530

Аудитор:: codex Посмотреть историю аудитов →

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/ceeon-videocut/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/ceeon-videocut/security.svg)](https://skillstore.io/skills/ceeon-videocut?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/ceeon-videocut?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ceeon-videocut/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/ceeon-videocut.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

chengfeng / AI产品自由. (2026). videocut security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/ceeon-videocut/audits/9

Цитата BibTeX

@techreport{chengfeng-ai-ceeon-videocut-2026,
  author = {chengfeng / AI产品自由},
  title = {videocut security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/ceeon-videocut/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "videocut security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "chengfeng / AI产品自由"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/ceeon-videocut/audits/9"
identifiers:
  - type: other
    value: "skillstore:ceeon-videocut:audit:9"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Редактирование разговорных видео авторов

Удаляйте подтвержденные ошибки, слова-паразиты и длинные паузы из записанных разговорных видео.

Подготовка фрагментов курсов

Применяйте точные вырезки по временным меткам к записям лекций перед публикацией учебных материалов.

Очистка внутренних брифингов

Превращайте черновые записи встреч или брифингов в более чистые клипы с субтитрами.

Попробуйте эти промпты

Выполнить подтвержденные вырезки

Используй videocut, чтобы выполнить подтвержденные задачи на удаление для этого видео. Сохрани неотмеченные элементы и сгенерируй отредактированное видео.

Вырезать и проверить речь

Вырежи отмеченные диапазоны временных меток, повторно транскрибируй отредактированный файл и сообщи, остались ли речевые ошибки.

Сохранить выбранные паузы

Выполни все отмеченные вырезки, кроме элементов тишины 3 и 5. Сохрани эти паузы, затем создай субтитры для финальной версии.

Повторять до полной очистки

Примени текущий список удаления, создай новую версию, заново запусти проверку транскрибации и продолжай только с подтвержденными новыми вырезками.

Лучшие практики

Подтверждайте каждый диапазон удаления перед запуском FFmpeg.
Используйте диапазоны временных меток вместо поиска по тексту транскрипта.
Проверяйте отредактированный транскрипт перед публикацией финального видео.

Избегать

Не удаляйте неотмеченные задачи из списка проверки.
Не выполняйте повторный поиск по тексту, когда уже есть точные временные метки.
Не запускайте медиа-команды для недоверенных путей без подтверждения пользователя.