Навыки video-edit
📦

video-edit

Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе

Edit Videos with Intent-Routed AI Models

Choosing the wrong video model wastes time and weakens identity or motion consistency. This skill routes each edit to a suitable RunComfy model with focused prompts.

Поддерживает: Claude Codex Code(CC)
⚠️ 38 Плохо

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "video-edit" from https://skillstore.io/skills/genmedia-labs-video-edit.md and its manifest at https://skillstore.io/api/skills/genmedia-labs-video-edit/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/genmedia-labs-video-edit.md Подписанный manifest GET /api/skills/genmedia-labs-video-edit/manifest Подписанный lockfile GET /api/skills/genmedia-labs-video-edit/lockfile

Протестировать

Использование «video-edit». Replace a talking-head background with a neutral office and keep the speaker unchanged.

Ожидаемый результат:

Selected Wan 2.7 Edit-Video. The edit preserves face, pose, lip movement, framing, and original audio while changing only the background.

Использование «video-edit». Make the target character follow the dance from a reference clip.

Ожидаемый результат:

Selected Kling 2.6 Pro Motion Control. The target image defines character identity, while the reference video supplies motion and optional sound.

Использование «video-edit». Change a walking subject's outfit to business attire without changing their face.

Ожидаемый результат:

Selected Lucy Edit Restyle. The prompt limits the change to clothing and preserves the subject's face and motion at 720p.

Аудит безопасности

Высокий риск
v1 • 13.08.2026 Открыть версионный отчет

Most static alerts are false positives caused by Markdown backticks, placeholder HTTPS URLs, and ellipses misread as path traversal. Confirmed risks include unpinned third-party installation, external CLI execution, unsafe shell interpolation of user-derived JSON, and disclosed third-party processing of prompts and media.

1
Просканировано файлов
226
Проанализировано строк
9
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (3)

Высокий
SKILL.md:77-97SKILL.md:128-137SKILL.md:167-184SKILL.md:222
Shell Injection Risk in Inline JSON Commands
Examples place prompts and media URLs inside single-quoted JSON passed through a shell. Line 222 considers only CLI expansion, but shell parsing occurs before the CLI receives the argument.
The skill is designed to insert user edit text into these commands, and the examples rely on shell quoting. One example manually escapes an apostrophe, but no general escaping requirement is defined.
Средний
SKILL.md:27-29SKILL.md:49
Unpinned Third-Party Code Installation
The setup runs an unversioned npx tool against a mutable repository and globally installs the latest RunComfy CLI. A compromised future release could execute during installation.
Both commands visibly omit immutable versions or commit references. npm and npx installation can execute package lifecycle code.
Низкий
SKILL.md:217-224
Third-Party Processing of Prompts and Media
The CLI sends prompts to RunComfy, directs its servers to fetch supplied media URLs, and downloads generated results. Sensitive prompts or media leave the local environment.
The networking and third-party fetch behavior is explicitly documented. This is expected functionality, but it creates a clear privacy boundary.
Пункты проверки возможностей (9)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий
SKILL.md:77-85
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
Высокий
SKILL.md:89-98
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
Высокий
SKILL.md:128-138
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
Высокий
SKILL.md:167-174
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
Высокий
SKILL.md:178-185
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
Средний
SKILL.md:13
Ruby/shell backtick execution
on the wrong model. Calls `runcomfy run <vendor>/<model>/<endpoint>`
The skill explicitly delegates work to the local RunComfy CLI, which submits remote jobs and downloads output files. This is an intentional external-command capability with network and filesystem effects.
Средний
SKILL.md:27-29
Ruby/shell backtick execution
```bash
The installation example runs an unversioned npx package against a mutable GitHub repository. This executes third-party package code and installs remote skill content.
Средний
SKILL.md:49-50
Ruby/shell backtick execution
1. **RunComfy CLI** — `npm i -g @runcomfy/cli`
The prerequisite globally installs an unpinned npm package, which can execute package lifecycle code. This creates a real third-party supply-chain boundary.
Средний
SKILL.md:217
Ruby/shell backtick execution
The skill picks one of Wan 2.7 Edit-Video / Kling 2.6 Pro Motion Control / Lucy Edit Restyle based o
The skill explicitly delegates work to the local RunComfy CLI, which submits remote jobs and downloads output files. This is an intentional external-command capability with network and filesystem effects.

Факторы риска

⚙️ Внешние команды (47)
SKILL.md:13 SKILL.md:27-29 SKILL.md:29-37 SKILL.md:37-49 SKILL.md:49-50 SKILL.md:50-51 SKILL.md:51-58 SKILL.md:58-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67 SKILL.md:68-69 SKILL.md:69 SKILL.md:70 SKILL.md:71-77 SKILL.md:77-85 SKILL.md:85-89 SKILL.md:89-98 SKILL.md:98-102 SKILL.md:102-104 SKILL.md:104-105 SKILL.md:105-112 SKILL.md:112-120 SKILL.md:120-121 SKILL.md:121-122 SKILL.md:122-123 SKILL.md:123-124 SKILL.md:124 SKILL.md:128-138 SKILL.md:138-143 SKILL.md:143-145 SKILL.md:145 SKILL.md:151-159 SKILL.md:159-160 SKILL.md:160-161 SKILL.md:161 SKILL.md:167-174 SKILL.md:174-178 SKILL.md:178-185 SKILL.md:185-190 SKILL.md:190-200 SKILL.md:200-217 SKILL.md:217 SKILL.md:221 SKILL.md:222-224 SKILL.md:224
🌐 Доступ к сети (10)
SKILL.md:17 SKILL.md:23 SKILL.md:81 SKILL.md:93 SKILL.md:94 SKILL.md:132 SKILL.md:133 SKILL.md:171 SKILL.md:182 SKILL.md:213
📁 Доступ к файловой системе (9)
SKILL.md:81 SKILL.md:93 SKILL.md:94 SKILL.md:132 SKILL.md:133 SKILL.md:171 SKILL.md:182 SKILL.md:221 SKILL.md:221
Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/genmedia-labs-video-edit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/genmedia-labs-video-edit/security.svg)](https://skillstore.io/skills/genmedia-labs-video-edit?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/genmedia-labs-video-edit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/genmedia-labs-video-edit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/genmedia-labs-video-edit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

genmedia-labs. (2026). video-edit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/genmedia-labs-video-edit/audits/1

Цитата BibTeX

@techreport{genmedia-labs-genmedia-labs-video-edit-2026, author = {genmedia-labs}, title = {video-edit security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/genmedia-labs-video-edit/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "video-edit security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "genmedia-labs" date-released: "2026-08-13" url: "https://skillstore.io/skills/genmedia-labs-video-edit/audits/1" identifiers: - type: other value: "skillstore:genmedia-labs-video-edit:audit:1" description: "Skillstore immutable audit report identifier"

Сравнить варианты

5 устанавливаемых вариантов

Навык каждого автора остаётся отдельным устанавливаемым вариантом. Рекомендуемый вариант ранжируется по данным Skillstore.

Почему этот вариант первый

Больше использования в Skillstore
runcomfy-com Рекомендуется

runcomfy-com-video-edit

Оценка Skillstore 78
Достоверность доказательств Высокий
Использование в Skillstore 51
Обновлено

2026-09-09

agentspace-so

agentspace-so-video-edit

Оценка Skillstore 78
Достоверность доказательств Высокий
Использование в Skillstore 44
Обновлено

2026-09-09

doany-ai

doany-ai-video-edit

Оценка Skillstore 50
Достоверность доказательств Высокий
Использование в Skillstore 38
Обновлено

2026-09-09

skills-collective

skills-collective-video-edit

Оценка Skillstore 38
Достоверность доказательств Средний
Использование в Skillstore 37
Обновлено

2026-09-09

genmedia-labs Текущий

genmedia-labs-video-edit

Оценка Skillstore 38
Достоверность доказательств Средний
Использование в Skillstore 30
Обновлено

2026-09-09

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
85
Сопровождаемость
87
Контент
65
Сообщество
91
Соответствие спецификации

Что вы можете построить

Polish Product Videos

Replace packaging or backgrounds while preserving framing, hand movement, camera motion, and source audio.

Transfer Character Motion

Map movement from a reference clip onto a target character while maintaining visual identity.

Restyle Short Social Clips

Change outfits, lighting, or atmosphere while preserving faces, poses, and motion.

Попробуйте эти промпты

Simple Background Change 
Edit {video_url}. Preserve the subject's face, pose, motion, and audio. Change only the background to {background_description}.
Reference Packaging Swap 
Use {reference_image_url} to replace the package design in {video_url}. Preserve framing, hand movement, camera motion, and original audio.
Character Motion Transfer 
Transfer motion from {motion_video_url} to the character in {character_image_url}. Keep the character identity and {sound_preference}.
Constrained Restyle 
Restyle {video_url} with {single_visual_change}. Preserve {identity_features}, {motion_features}, framing, and aspect ratio. Use {resolution} and seed {seed}.

Лучшие практики

  • State preservation requirements before the requested visual change.
  • Request one edit direction per run to reduce temporal drift.
  • Use reference media only when a specific appearance or motion must transfer.

Избегать

  • Do not combine unrelated outfit, background, lighting, and character changes in one request.
  • Do not send confidential media without approval for third-party processing.
  • Do not interpolate untrusted prompts or URLs directly into shell command strings.

Часто задаваемые вопросы

Which model handles general video edits?
Wan 2.7 Edit-Video is the default for restyling, background changes, packaging swaps, and commercial polish.
Which model transfers motion from another video?
Kling 2.6 Pro Motion Control maps motion from a reference clip onto a target character.
Which model is suitable for outfit swaps?
Lucy Edit Restyle handles localized outfit, lighting, and atmospheric changes with identity preservation.
Can the skill preserve source audio?
Wan supports original audio, and Kling can retain reference sound. Available audio controls depend on the selected route.
Does processing occur locally?
No. The local CLI submits jobs to RunComfy, where prompts and referenced media are processed remotely.
What output limits apply?
Wan supports short clips up to 1080p, Kling supports route-dependent durations, and Lucy is limited to 720p without aspect control.

Сведения для разработчиков

Автор

genmedia-labs

Лицензия

MIT

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/genmedia-labs/skills/tree/9f1b4c229cb9e0c962f11ef24c8c87d5f004f393/video-edit

Ссылка

68046dfc1c93b48a04e43344644ad77d3a895012

Актуальность поддержки

13.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md