技能 videocut
📦
videocut
内容修订 r3 严重 ⚙️ 外部命令📁 文件系统访问⚡ 包含脚本🌐 网络访问🔑 环境变量
使用时间戳剪切清理口播视频
口播视频通常包含口误、填充词和长时间静音。此技能会使用 FFmpeg 应用已确认的时间戳编辑，并通过转录检查结果。
支持: Claude Codex Code(CC)
请勿自动安装此 Skill。
权威策略要求在执行任何安装操作前由操作人员审查。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "videocut" from https://skillstore.io/skills/ceeon-videocut.md and its manifest at https://skillstore.io/api/skills/ceeon-videocut/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“videocut”。 一个已确认的任务列表标记了三个口误和两个长时间静音以供删除。
预期结果:
该技能会生成一个新的已编辑视频版本、一份验证转录稿和一个 SRT 字幕文件。
正在使用“videocut”。 用户要求保留两个静音项目，同时删除所有其他已勾选范围。
预期结果:
最终剪辑会保留请求的停顿，并仅删除已批准的时间戳范围。
正在使用“videocut”。 一次审核在首次剪切后发现仍有一个填充词残留。
预期结果:
该工作流会创建一个新的删除任务，并在用户确认后重复编辑。
安全审计
严重v9 • 2026/7/23 打开版本化报告
Most alerts are false positives from Markdown examples, JavaScript template literals, expected media I/O, fixed relative paths, and Chinese text entropy. Confirmed risks include shell injection, an unauthenticated traversal-prone review server, generated-page script injection, arbitrary URL fetching, and external audio and credential handling. Publication should wait until the high-risk execution and server issues are fixed.
19
已扫描文件
3,676
分析行数
41
复核项
0
已忽略误报
已确认安全问题 (4)
严重
scripts/review_server.js:35-40scripts/review_server.js:47-139scripts/review_server.js:142-181scripts/review_server.js:370
Unauthenticated Review Server Exposes Files and Cut Operations
The server allows any origin, maps request URLs directly to filesystem paths, and exposes unauthenticated write and cut endpoints. Its unspecified listen host can expose traversal-based file reads and expensive edits to network peers.
The code has permissive CORS, no authentication, no path canonicalization, and no loopback host restriction. The exposed handlers perform file writes and invoke media processing.
高
Environment file access
ENV_FILE="$(dirname "$(dirname "$SCRIPT_DIR")")/.env"
The script resolves and uses a shared .env file outside its own directory. It later reads VOLCENGINE_API_KEY from that credential file.
高
Generated Review Page Allows Script Injection
The generator inserts the video filename and serialized transcript data directly into HTML and an inline script without HTML-safe escaping. Crafted input can close the script or markup context and execute JavaScript.
The direct template interpolation is visible and JSON.stringify does not escape the HTML script-closing sequence. Both filename and transcript files are caller-controlled inputs.
高
Arbitrary Audio URL Fetch Enables SSRF and Reupload
The transcription script accepts any HTTP or HTTPS URL, follows redirects, and applies no destination restrictions. It then sends the downloaded content to Volcengine, enabling access to internal URLs and external disclosure.
The URL is accepted from the first argument and passed to curl with redirect following. The resulting file is base64-encoded and submitted to a third-party endpoint.
能力复核项 (41)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
Shell command substitution
TOTAL_SEGS=$(node -e "
The command substitution builds Node source containing the caller-controlled deletion-list path and ffprobe output. A path containing quotes can escape the JavaScript string and execute code.
高
Unix shell invocation
const script = '#!/bin/bash\nffmpeg -y -v error' +
This generated shell script embeds the input video path without shell escaping and is later executed with bash. A crafted filename can break the quoted argument and inject commands.
高
Node.js fs operations
const deleteSegs = JSON.parse(fs.readFileSync('$DELETE_JSON', 'utf8'));
The deletion-list path is interpolated directly into Node source rather than passed as an argument. Quote characters in the path create a code-injection path.
高
Node.js fs operations
fs.writeFileSync('$TMP_DIR/cmd_' + padded + '.sh', script);
The file operation writes executable shell scripts whose command text contains an unescaped input video path. Those files are executed later, making crafted filenames dangerous.
高
Synchronous file operations
const deleteSegs = JSON.parse(fs.readFileSync('$DELETE_JSON', 'utf8'));
The synchronous read is expressed inside dynamically constructed Node source with an unescaped caller-controlled path. This can become JavaScript code execution.
高
Synchronous file operations
fs.writeFileSync('$TMP_DIR/cmd_' + padded + '.sh', script);
This write persists generated shell commands containing an unescaped video path. The later bash execution turns malformed filenames into a command-injection risk.
高
Node.js child_process module
const { execSync } = require('child_process');
The server imports child_process and later builds shell command strings from the video path. Because the path can be caller-controlled, the module enables command injection in request-triggered work.
高
Synchronous process execution
execSync(`bash "${scriptPath}" "${VIDEO_FILE}" delete_segments.json "${outputFile}"`, {
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
高
Synchronous process execution
const originalDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
高
Synchronous process execution
const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
高
Synchronous process execution
audioOffset = parseFloat(execSync(`ffprobe -v error -show_entries format=start_time -of csv=p=0 "${a
execSync receives a command string containing a workspace-derived path. A quote or shell metacharacter in that path can alter the command.
高
Synchronous process execution
const duration = parseFloat(execSync(probeCmd).toString().trim());
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
高
Synchronous process execution
execSync(cmd, { stdio: 'pipe' });
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
高
Synchronous process execution
const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
高
Synchronous process execution
execSync(cmd, { stdio: 'pipe' });
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
高
Synchronous process execution
execSync(concatCmd, { stdio: 'pipe' });
execSync runs a shell command string containing the caller-provided video path or an output path derived from it. Quoting alone does not prevent injection through embedded quotes or command substitutions.
高
Ruby/shell backtick execution
execSync(`bash "${scriptPath}" "${VIDEO_FILE}" delete_segments.json "${outputFile}"`, {
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
高
Ruby/shell backtick execution
const originalDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
高
Ruby/shell backtick execution
const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
高
Ruby/shell backtick execution
audioOffset = parseFloat(execSync(`ffprobe -v error -show_entries format=start_time -of csv=p=0 "${a
This JavaScript template literal constructs a shell command with a workspace-derived path and then passes it to execSync. A specially named directory can inject shell syntax.
高
Ruby/shell backtick execution
const probeCmd = `ffprobe -v error -show_entries format=duration -of csv=p=0 "file:${input}"`;
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
高
Ruby/shell backtick execution
const cmd = `ffmpeg -y -i "file:${input}" -filter_complex "${filterComplex}" -map "[outv]" -map "[ou
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
高
Ruby/shell backtick execution
const newDuration = parseFloat(execSync(`ffprobe -v error -show_entries format=duration -of csv=p=0
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
高
Ruby/shell backtick execution
const cmd = `ffmpeg -y -ss ${seg.start.toFixed(3)} -i "file:${input}" -t ${segDuration.toFixed(3)} -
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
高
Ruby/shell backtick execution
const concatCmd = `ffmpeg -y -f concat -safe 0 -i "${listFile}" -c copy "${output}"`;
This template literal is used to construct a shell command with a caller-controlled or derived media path. The resulting string is executed by a shell without robust escaping.
高
Node.js fs operations
fs.writeFileSync('saved_selection.json', body);
An unauthenticated HTTP endpoint accepts an unbounded request body and writes it to a fixed workspace file. Network clients can overwrite review state and consume memory or disk.
高
Node.js fs operations
fs.writeFileSync('delete_segments.json', JSON.stringify(deleteList, null, 2));
The unauthenticated cut endpoint writes attacker-supplied deletion ranges and immediately starts media processing. Any reachable client can alter output and trigger expensive work.
高
Node.js fs stat operations
if (!fs.existsSync(filePath)) {
The server applies the request URL directly to a relative filesystem path without canonicalization or root containment. Traversal sequences can make the stat operation target files outside the review directory.
高
Node.js fs stat operations
const stat = fs.statSync(filePath);
The server applies the request URL directly to a relative filesystem path without canonicalization or root containment. Traversal sequences can make the stat operation target files outside the review directory.
高
Synchronous file operations
fs.writeFileSync('saved_selection.json', body);
An unauthenticated HTTP endpoint accepts an unbounded request body and writes it to a fixed workspace file. Network clients can overwrite review state and consume memory or disk.
高
Synchronous file operations
fs.writeFileSync('delete_segments.json', JSON.stringify(deleteList, null, 2));
The unauthenticated cut endpoint writes attacker-supplied deletion ranges and immediately starts media processing. Any reachable client can alter output and trigger expensive work.
高
File stream creation
fs.createReadStream(filePath, { start, end }).pipe(res);
The stream serves a path derived directly from req.url without enforcing the review directory as a root. A traversal request can disclose arbitrary readable local files.
高
File stream creation
fs.createReadStream(filePath).pipe(res);
The stream serves a path derived directly from req.url without enforcing the review directory as a root. A traversal request can disclose arbitrary readable local files.
高
Hardcoded URL
SUBMIT_URL="https://openspeech.bytedance.com/api/v3/auc/bigmodel/submit"
This endpoint receives the user audio and API key over HTTPS as part of transcription. The transfer is intentional but is a real external data-disclosure boundary.
高
Hardcoded URL
QUERY_URL="https://openspeech.bytedance.com/api/v3/auc/bigmodel/query"
This endpoint is polled with the API key to retrieve transcription results. It is an intentional third-party network dependency with credential exposure.
高
Node.js fs operations
data: fs.readFileSync(audioFile).toString('base64'),
The script reads the complete audio file and base64-encodes it into a request sent to Volcengine. This is intentional, but user media leaves the local environment.
高
Synchronous file operations
data: fs.readFileSync(audioFile).toString('base64'),
The script reads the complete audio file and base64-encodes it into a request sent to Volcengine. This is intentional, but user media leaves the local environment.
高
Hidden file access
ENV_FILE="$(dirname "$(dirname "$SCRIPT_DIR")")/.env"
The script locates a shared ancestor .env file and later extracts a live API key from it. This is real access to hidden credential storage.
高
Generic API/secret keys
API_KEY=$(grep '^VOLCENGINE_API_KEY=' "$ENV_FILE" | tail -1 | cut -d'=' -f2- | tr -d '"' | tr -d "'"
This line reads VOLCENGINE_API_KEY from the shared .env file into process memory. The access is required for transcription but handles a live secret.
高
Generic API/secret keys
-H "X-Api-Key: $API_KEY" \
The API key is placed in an outbound X-Api-Key header to the configured Volcengine endpoint. This is expected authentication but remains credential disclosure to a third party.
高
Generic API/secret keys
-H "X-Api-Key: $API_KEY" \
The API key is placed in an outbound X-Api-Key header to the configured Volcengine endpoint. This is expected authentication but remains credential disclosure to a third party.
风险因素
⚙️ 外部命令 (50)
scripts/cut_video.sh:32 scripts/cut_video.sh:33 scripts/cut_video.sh:34 scripts/cut_video.sh:35 scripts/cut_video.sh:37 scripts/cut_video.sh:38 scripts/cut_video.sh:39 scripts/cut_video.sh:46 scripts/cut_video.sh:50 scripts/cut_video.sh:59-60 scripts/cut_video.sh:143 scripts/cut_video.sh:146 scripts/cut_video.sh:147 scripts/cut_video.sh:174 scripts/cut_video.sh:175 scripts/cut_video.sh:176 scripts/cut_video.sh:1 scripts/cut_video.sh:120 scripts/detect_en_stutter.js:43 scripts/detect_en_stutter.js:44 scripts/detect_en_stutter.js:47 scripts/generate_review.js:11 scripts/generate_review.js:42 scripts/generate_review.js:50 scripts/generate_review.js:59-919 scripts/generate_review.js:919-926 scripts/generate_review.js:926-927 scripts/generate_review.js:927-1027 scripts/generate_review.js:1032-1159 scripts/generate_review.js:1159-1332 scripts/generate_review.js:1332-1394 scripts/generate_review.js:1394 scripts/generate_review.js:1396-1410 scripts/generate_review.js:1410-1415 scripts/generate_review.js:1415-1420 scripts/generate_review.js:1420-1442 scripts/generate_review.js:1442-1479 scripts/generate_srt_for_video.sh:62 scripts/generate_srt_for_video.sh:67 scripts/generate_srt_for_video.sh:71 scripts/generate_srt_for_video.sh:30 scripts/generate_srt_for_video.sh:1 scripts/review_server.js:16 scripts/review_server.js:107 scripts/review_server.js:114 scripts/review_server.js:115 scripts/review_server.js:208 scripts/review_server.js:242 scripts/review_server.js:251 scripts/review_server.js:326
📁 文件系统访问 (50)
scripts/cut_video.sh:61 scripts/cut_video.sh:102 scripts/cut_video.sh:103 scripts/cut_video.sh:118 scripts/cut_video.sh:130 scripts/cut_video.sh:61 scripts/cut_video.sh:102 scripts/cut_video.sh:103 scripts/cut_video.sh:118 scripts/cut_video.sh:130 scripts/cut_video.sh:145 scripts/cut_video.sh:46 scripts/detect_en_stutter.js:18 scripts/detect_en_stutter.js:18 scripts/detect_en_stutter.js:20 scripts/generate_review.js:21 scripts/generate_review.js:22 scripts/generate_review.js:31 scripts/generate_review.js:35 scripts/generate_review.js:1481 scripts/generate_review.js:19 scripts/generate_review.js:21 scripts/generate_review.js:26 scripts/generate_review.js:34 scripts/generate_review.js:40 scripts/generate_review.js:31 scripts/generate_review.js:35 scripts/generate_review.js:1481 scripts/generate_review.js:999 scripts/generate_review.js:22 scripts/generate_srt_for_video.sh:45 scripts/generate_srt_for_video.sh:55 scripts/generate_srt_for_video.sh:70 scripts/generate_srt_for_video.sh:45 scripts/generate_srt_for_video.sh:55 scripts/generate_srt_for_video.sh:70 scripts/generate_srt_for_video.sh:55 scripts/generate_srt_for_video.sh:70 scripts/generate_srt_for_video.sh:71 scripts/generate_subtitles.js:19 scripts/generate_subtitles.js:59 scripts/generate_subtitles.js:140 scripts/generate_subtitles.js:14 scripts/generate_subtitles.js:58 scripts/generate_subtitles.js:19 scripts/generate_subtitles.js:59 scripts/generate_subtitles.js:140 scripts/review_server.js:22 scripts/review_server.js:53 scripts/review_server.js:68
⚡ 包含脚本 (5)
🌐 网络访问 (12)
scripts/generate_review.js:1279 scripts/generate_review.js:1289 scripts/generate_review.js:1427 scripts/generate_review.js:1484 scripts/review_server.js:373 scripts/volcengine_transcribe.sh:7 scripts/volcengine_transcribe.sh:17 scripts/volcengine_transcribe.sh:18 scripts/volcengine_transcribe.sh:19 SKILL.md:5 SKILL.md:362 SKILL.md:515
🔑 环境变量 (10)
scripts/volcengine_transcribe.sh:23 scripts/volcengine_transcribe.sh:29 scripts/volcengine_transcribe.sh:49 scripts/volcengine_transcribe.sh:54 scripts/volcengine_transcribe.sh:56 scripts/volcengine_transcribe.sh:57 scripts/volcengine_transcribe.sh:58 scripts/volcengine_transcribe.sh:140 scripts/volcengine_transcribe.sh:166 SKILL.md:530
审计者: codex 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/ceeon-videocut/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/ceeon-videocut?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/ceeon-videocut?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ceeon-videocut/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/ceeon-videocut.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
chengfeng / AI产品自由. (2026). videocut security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/ceeon-videocut/audits/9BibTeX 引用
@techreport{chengfeng-ai-ceeon-videocut-2026,
author = {chengfeng / AI产品自由},
title = {videocut security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/ceeon-videocut/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "videocut security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "chengfeng / AI产品自由"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/ceeon-videocut/audits/9"
identifiers:
- type: other
value: "skillstore:ceeon-videocut:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 45
架构
85
可维护性
87
内容
69
社区
78
规范符合性
你能构建什么
编辑创作者口播视频
从录制的口播视频中删除已确认的口误、填充词和长时间停顿。
准备课程片段
在发布学习材料前，对讲座录制内容应用精确的时间戳剪切。
清理内部简报
将粗糙的会议或简报录音转换为更清晰且带字幕的片段。
试试这些提示
运行已确认的剪切
使用 videocut 执行此视频的已确认删除任务。保留未勾选项目并生成已编辑视频。
剪切并验证语音
剪切已勾选的时间戳范围，重新转录已编辑文件，并报告是否仍有任何语音错误。
保留选定静音
执行所有已勾选剪切，但排除静音项目 3 和 5。保留这些停顿，然后为最终版本创建字幕。
迭代直到清理完成
应用当前删除列表，创建新版本，重新运行转录审核，并仅继续处理已确认的新剪切。
最佳实践
- 运行 FFmpeg 前确认每个删除范围。
- 使用时间戳范围，而不是搜索转录文本。
- 发布最终视频前审核已编辑的转录稿。
避免
- 不要删除审核列表中未勾选的任务。
- 当精确时间戳已经存在时，不要再次搜索文本。
- 未经用户确认，不要在不受信任的路径上运行媒体命令。
常见问题
此技能在编辑前需要什么？
它需要原始视频，以及来自审核工作流的已确认时间戳删除列表。
它会创建字幕吗？
是的。工作流会在已编辑视频通过审核后生成 SRT 字幕文件。
它可以自动决定删除内容吗？
不会。此技能设计用于执行已确认的删除任务，而不是自行批准删除。
它使用哪些工具？
它使用 FFmpeg 进行剪切，并使用 FunASR 进行转录和时间戳验证。
为什么时间戳很重要？
时间戳可防止因重复词语或转录搜索错误而导致的意外删除。
首次运行是否有设置成本？
是的。FunASR 可能会在本地转录可用前下载大型语音模型。