Skills faceswap
📦
faceswap
v1.2.0 Content revision r1 High Risk 🌐 Network access🔑 Env variables⚙️ External commands📁 Filesystem access
Swap Faces in Short Videos
Face-swap video workflows need several upload, trim, and polling steps. This skill guides Claude, Codex, and Claude Code through the verging.ai API flow.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "faceswap" from https://skillstore.io/skills/verging-ai-faceswap.md and its manifest at https://skillstore.io/api/skills/verging-ai-faceswap/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "faceswap". A local video and local face image are provided with normal quality.
Expected outcome:
The assistant reports the clip duration, confirms credit needs, uploads the media, polls progress, and returns the completed result link.
Using "faceswap". A 40 second source video is provided with a requested 10 to 25 second segment.
Expected outcome:
The assistant trims the selected segment, creates the face-swap job, and saves the final video to the requested output folder.
Using "faceswap". A remote video URL and remote face image URL are provided for HD output.
Expected outcome:
The assistant downloads approved sources, estimates the higher HD credit cost, uploads media, and reports the finished result location.
Security Audit
High Riskv7 • 7/7/2026 Open versioned report
The skill is a legitimate verging.ai face-swap workflow, but it performs real outbound network calls, external media processing commands, API-key handling, and temporary file storage. Many Markdown backtick findings are false positives, while the confirmed risks center on credential exposure in curl commands, third-party upload of biometric media, and arbitrary remote media inputs.
2
Files scanned
225
Lines analyzed
29
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Potential Non-Consensual Face Swap Misuse
The skill accepts arbitrary video and face image inputs, then creates a face-swap job. It only reminds users to process media they have rights to, so misuse for impersonation or non-consensual synthetic media remains possible.
The documented options accept any video and face image path or URL, and the create-job step uploads the face image directly. The rights reminder is helpful but does not enforce consent.
High
Biometric Media Sent to Third-Party Services
The workflow uploads video and face images to verging.ai and storage URLs, then returns external result locations. This creates privacy exposure for biometric media beyond the local machine.
The upload and create-job steps explicitly transfer user media to remote API and storage endpoints. The response examples show externally hosted upload and result URLs.
Capability review items (29)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys
curl -H "Authorization: ApiKey $VERGING_API_KEY" \
The command expands $VERGING_API_KEY into an Authorization header for curl. This is expected API authentication, but a live secret is handled in command-line arguments.
High
Generic API/secret keys
-H "Authorization: ApiKey $VERGING_API_KEY" \
The upload URL request expands $VERGING_API_KEY into a curl Authorization header. This handles a live credential in command-line arguments.
High
Generic API/secret keys
-H "Authorization: ApiKey $VERGING_API_KEY" \
The create-job request expands $VERGING_API_KEY while uploading face media. This combines secret handling with external media upload.
High
Generic API/secret keys
curl -H "Authorization: ApiKey $VERGING_API_KEY" \
The job polling command expands $VERGING_API_KEY into a curl header. This is legitimate use, but still exposes a live API key to shell command handling.
Medium
Ruby/shell backtick execution
```bash
This Markdown block instructs use of curl to call verging.ai authentication endpoints with an Authorization header. It is intended behavior, but it executes a network command and handles an API credential.
Medium
Ruby/shell backtick execution
```bash
The cited block runs curl with $VERGING_API_KEY to check credits. This is legitimate API use, but it exposes a secret-bearing header to a shell command.
Medium
Ruby/shell backtick execution
```bash
The block runs curl POST to request an upload URL. It is an external command that uses the user API key and prepares user media for upload.
Medium
Ruby/shell backtick execution
```bash
The block runs curl -T to upload /tmp/verging-faceswap/trimmed.mp4 to a presigned URL. This executes an external command that transfers local media off the machine.
Medium
Ruby/shell backtick execution
```bash
The block runs curl with multipart upload of the face image. It executes an external command that sends biometric media and an API key to the service.
Medium
Ruby/shell backtick execution
```bash
The block runs curl to poll job status against verging.ai. It is expected network behavior, but still an external command issued by the skill workflow.
Medium
Ruby/shell backtick execution
- Video URL → `yt-dlp "URL" -o /tmp/verging-faceswap/input.mp4`
The workflow instructs yt-dlp to download a user-provided video URL into /tmp. Running a downloader on arbitrary URLs is a real external-command risk.
Medium
Ruby/shell backtick execution
- Image URL → `curl -L -o /tmp/verging-faceswap/face.jpg "URL"`
The workflow instructs curl to download a user-provided image URL into /tmp. This can retrieve arbitrary remote content through an external command.
Medium
Ruby/shell backtick execution
3. **Get video duration** → `ffprobe -v error -show_entries format=duration -of default=noprint_wrap
The workflow instructs ffprobe to parse a user-provided video file. External media parsers increase local attack surface when processing untrusted files.
Medium
Ruby/shell backtick execution
```bash
The cited bash block contains the ffmpeg trim command for user media. Executing ffmpeg on untrusted input is a real external-command surface.
Medium
Temp directory access
curl -X PUT -T /tmp/verging-faceswap/trimmed.mp4 \
The command reads a predictable /tmp path and uploads it. This can expose sensitive media if permissions or cleanup are weak.
Medium
Temp directory access
-F "swap_image=@/tmp/verging-faceswap/face.jpg" \
The multipart upload reads face.jpg from a fixed /tmp directory. It handles biometric data from a shared temporary path.
Medium
Temp directory access
- Video URL → `yt-dlp "URL" -o /tmp/verging-faceswap/input.mp4`
yt-dlp writes user media to a fixed /tmp path. Predictable temp locations can collide or leak media on shared hosts.
Medium
Temp directory access
- Image URL → `curl -L -o /tmp/verging-faceswap/face.jpg "URL"`
curl writes a user-provided face image to a fixed /tmp path. That temp file may contain sensitive biometric data.
Medium
Temp directory access
ffmpeg -i input.mp4 -ss <start> -to <end> -c:v libx264 -c:a aac /tmp/verging-faceswap/trimmed.mp4
ffmpeg writes the trimmed video to a fixed /tmp path. The file can contain sensitive media and needs private permissions and cleanup.
Medium
Temp directory access
- **Temp directory: `/tmp/verging-faceswap/`** — create with `mkdir -p`
The skill instructs creation of a fixed temp directory under /tmp. Without a private mktemp-style directory, this is a real temp-file safety risk.
Low
Hardcoded URL
/faceswap -v "https://youtube.com/watch?v=xxx" -f "https://example.com/face.jpg"
The usage example accepts a YouTube URL and a remote face-image URL. This confirms the skill can fetch arbitrary remote resources, so network access is real.
Low
Hardcoded URL
curl -H "Authorization: ApiKey vrg_sk_your_key_here" https://verging.ai/api/v1/auth/me
The command calls the verging.ai auth endpoint with an API-key header. The URL is expected for the service, but it confirms outbound network activity with credentials.
Low
Hardcoded URL
curl -H "Authorization: Bearer vrg_sk_your_key_here" https://verging.ai/api/v1/auth/me
The command calls the same verging.ai auth endpoint using a Bearer header. It confirms intentional outbound network access with a credential-bearing request.
Low
Hardcoded URL
https://verging.ai/api/v1/auth/me
The cited endpoint is used by curl to check account credits. It confirms the skill contacts the verging.ai API during normal operation.
Low
Hardcoded URL
curl -X POST https://verging.ai/api/v1/upload-video \
The command posts to verging.ai to obtain a video upload URL. This is a real outbound network operation for user media.
Low
Hardcoded URL
"url": "https://...r2.cloudflarestorage.com/...?X-Amz-...",
The response example shows a presigned Cloudflare R2 storage URL. This confirms third-party storage endpoints are part of the upload flow.
Low
Hardcoded URL
"public_url": "https://img.panpan8.com/face-swap/2026-05-31/xxx.mp4"
The response example shows a public media URL on img.panpan8.com. That indicates generated or uploaded media may be available through external URLs.
Low
Hardcoded URL
curl -X POST https://verging.ai/api/v1/faceswap/create-job \
The command posts the face-swap job to verging.ai with multipart media. This is a real outbound API call carrying user-provided face data.
Low
Hardcoded URL
"https://verging.ai/api/v1/faceswap/jobs?job_ids=295"
The command polls a verging.ai job status endpoint. It is expected, but confirms ongoing outbound network access during the workflow.
Risk Factors
🌐 Network access (11)
🔑 Env variables (9)
⚙️ External commands (31)
SKILL.md:27-29 SKILL.md:29-46 SKILL.md:46-48 SKILL.md:48-54 SKILL.md:54-61 SKILL.md:61-64 SKILL.md:64-65 SKILL.md:65-68 SKILL.md:68-74 SKILL.md:74-76 SKILL.md:76-84 SKILL.md:84-87 SKILL.md:87-91 SKILL.md:91-94 SKILL.md:94-104 SKILL.md:104-105 SKILL.md:105-108 SKILL.md:108-111 SKILL.md:111-112 SKILL.md:112-118 SKILL.md:118-119 SKILL.md:119-120 SKILL.md:120-122 SKILL.md:122-124 SKILL.md:124-127 SKILL.md:127-133 SKILL.md:133 SKILL.md:135-136 SKILL.md:136 SKILL.md:138 SKILL.md:150-153
📁 Filesystem access (7)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/verging-ai-faceswap/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/verging-ai-faceswap?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/verging-ai-faceswap?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/verging-ai-faceswap/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/verging-ai-faceswap.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
verging.ai. (2026). faceswap security audit report (audit version 7) [Author version 1.2.0]. Skillstore. https://skillstore.io/skills/verging-ai-faceswap/audits/7BibTeX citation
@techreport{verging-ai-verging-ai-faceswap-2026,
author = {verging.ai},
title = {faceswap security audit report (audit version 7)},
institution = {Skillstore},
year = {2026},
number = {7},
url = {https://skillstore.io/skills/verging-ai-faceswap/audits/7},
note = {Author version 1.2.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "faceswap security audit report (audit version 7)"
version: "1.2.0"
type: report
authors:
- name: "verging.ai"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/verging-ai-faceswap/audits/7"
identifiers:
- type: other
value: "skillstore:verging-ai-faceswap:audit:7"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
100
Maintainability
87
Content
71
Community
100
Spec Compliance
What You Can Build
Prototype Short Face-Swap Clips
Create short test clips from approved video and face assets while checking credits and API job status.
Prepare Controlled Marketing Drafts
Generate internal concept videos from licensed footage before sending approved assets to a production team.
Automate Media API Workflows
Combine trimming, upload, polling, and optional download into a repeatable command-line process.
Try These Prompts
Run a Basic Local Swap
Use faceswap with ./video.mp4 and ./face.jpg. Keep normal quality and show me the result URL when the job finishes.
Trim and Download the Result
Use faceswap on ./source.mp4 and ./approved-face.jpg from 5 to 25 seconds. Download the completed result to ./outputs.
Use Remote Video and Image Sources
Use faceswap with this YouTube video URL and this face image URL. Confirm the duration before uploading media.
Check Credits Before HD Output
Check my verging.ai credits, estimate the HD cost for a 20 second clip, then run faceswap only if enough credits remain.
Best Practices
- Use only media where you have consent and clear usage rights.
- Set VERGING_API_KEY in a private environment before starting a session.
- Clean temporary media files after each job finishes.
Avoid
- Do not use private, copyrighted, or personal media without permission.
- Do not paste real API keys into prompts, screenshots, or shared logs.
- Do not process unknown URLs unless you trust the source and content.
Frequently Asked Questions
Does this skill run locally?
It runs local helper commands, but face-swap processing happens through the verging.ai API.
What API key is required?
The skill expects VERGING_API_KEY from a verging.ai account with enough credits.
Can it use YouTube or Bilibili videos?
Yes. It uses yt-dlp to download supported video URLs before trimming and upload.
What is the maximum video length?
The documented workflow limits face-swap input to 30 seconds and trims longer videos.
Does HD mode cost more?
Yes. The skill documentation states HD mode costs three credits per second.
What should I check before using it?
Confirm consent, rights, API credits, installed tools, and whether third-party media upload is acceptable.
Developer Details
Author
verging.aiLicense
MIT
Author version
v1.2.0
Skillstore revision
r1
Ref
36e07d5e13068e5be64447e8f20b427cf2cbd21a
Maintenance freshness
7/18/2026
Usage
9 downloads · 264 views