技能 byted-mediakit-audio

📦

byted-mediakit-audio

Name: byted-mediakit-audio
Author: volcengine

v0.2.1 内容修订 r1 中风险 ⚙️ 外部命令📁 文件系统访问

Process Audio with MediaKit

Audio analysis and conversion often require different tools and precise parameters. This skill selects MediaKit workflows for metadata, voice activity, separation, and transcoding.

支持: Claude Codex Code(CC)

📊 71 合格

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "byted-mediakit-audio" from https://skillstore.io/skills/volcengine-byted-mediakit-audio.md and its manifest at https://skillstore.io/api/skills/volcengine-byted-mediakit-audio/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/volcengine-byted-mediakit-audio.md 已签名 manifest GET /api/skills/volcengine-byted-mediakit-audio/manifest 已签名 lockfile GET /api/skills/volcengine-byted-mediakit-audio/lockfile

测试它

正在使用“byted-mediakit-audio”。 Inspect the metadata for a WAV recording.

预期结果:

Container: WAV
Codec: PCM
Duration: 184.2 seconds
Channels: 2
Sample rate: 48,000 Hz

正在使用“byted-mediakit-audio”。 Find speech in an interview recording.

预期结果:

Three voice segments detected.
Segment 1: 2.10 to 18.45 seconds
Segment 2: 20.03 to 47.80 seconds
Segment 3: 51.22 to 76.14 seconds

正在使用“byted-mediakit-audio”。 Separate vocals from a music track.

预期结果:

The cloud task completed and returned separate voice and background audio locations.

安全审计

中风险

v1 • 2026/9/12 打开版本化报告

All 21 static findings are false positives caused by Markdown syntax, Chinese technical text, a fixed sibling reference, a generic metadata key, or normal task polling. No prompt injection or obfuscated payload was found. Cloud processing can disclose user media, and unquoted URL substitution can create shell interpretation risk.

已扫描文件

421

分析行数

复核项

已忽略误报

已确认安全问题 (2)

中

reference/separate-voice.md:24-31 reference/transcode-audio.md:52-57

External Cloud Processing of User Media

Cloud workflows submit user-provided media locations to MediaKit and can write derived files to VOD or TOS storage. Users should approve this external disclosure.

The reference files explicitly describe cloud input URLs, callbacks, and output storage destinations. The behavior is intentional and clearly documented.

中

reference/detect-voice-activity.md:33-39 reference/probe-audio-metadata.md:31-39

Unquoted Shell Placeholder Substitution

Command examples place user-provided URL placeholders in shell commands without requiring argument escaping. Shell metacharacters in supplied values could alter command interpretation.

The examples show direct placeholder replacement in shell commands and require real user input, but no escaping rule is stated. Actual exposure depends on the agent runtime and CLI invocation mechanism.

风险因素

⚙️ 外部命令 (9)

SKILL.md:20 SKILL.md:21 SKILL.md:22 SKILL.md:24 SKILL.md:25 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38

📁 文件系统访问 (1)

SKILL.md:20

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/volcengine-byted-mediakit-audio/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/volcengine-byted-mediakit-audio/security.svg)](https://skillstore.io/skills/volcengine-byted-mediakit-audio?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/volcengine-byted-mediakit-audio?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/volcengine-byted-mediakit-audio/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/volcengine-byted-mediakit-audio.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

volcengine. (2026). byted-mediakit-audio security audit report (audit version 1) [Author version 0.2.1]. Skillstore. https://skillstore.io/skills/volcengine-byted-mediakit-audio/audits/1

BibTeX 引用

@techreport{volcengine-volcengine-byted-mediakit-audio-2026,
  author = {volcengine},
  title = {byted-mediakit-audio security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/volcengine-byted-mediakit-audio/audits/1},
  note = {Author version 0.2.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "byted-mediakit-audio security audit report (audit version 1)"
version: "0.2.1"
type: report
authors:
  - name: "volcengine"
date-released: "2026-09-12"
url: "https://skillstore.io/skills/volcengine-byted-mediakit-audio/audits/1"
identifiers:
  - type: other
    value: "skillstore:volcengine-byted-mediakit-audio:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

100

可维护性

内容

社区

规范符合性

你能构建什么

Prepare Podcast Edits

Find spoken segments and separate voices from background sound before editing.

Audit Media Libraries

Inspect technical metadata and identify files that need format normalization.

Deliver Compatible Audio

Convert audio codecs, containers, bitrate, channels, and loudness for target platforms.

试试这些提示

Inspect Audio Metadata

Inspect the audio at [audio URL]. Report its format, codec, duration, bitrate, channels, sample rate, and size.

Detect Spoken Segments

Detect voice activity in [audio or video URL]. Return each spoken segment with start and end times.

Separate Voice and Background

Separate the voice and background audio from [media URL]. Use [output format] and report both output locations.

Configure Audio Delivery

Transcode [audio URL] to [container] using [bitrate], [sample rate], [channels], and [loudness target]. Preserve only [metadata tags].

最佳实践

Confirm the operation, input location, and output requirements before execution.
Use only user-provided callback, queue, token, and storage values.
Review the current CLI schema before using advanced or changing parameters.

避免

Do not invent media URLs, credentials, callback details, queue identifiers, or storage destinations.
Do not send sensitive media to cloud processing without explicit user approval.
Do not use this skill for editing, subtitle generation, transcription, or video enhancement.