技能 byted-mediakit-shared

📦

byted-mediakit-shared

Name: byted-mediakit-shared
Author: volcengine

v0.2.1 内容修订 r1 高风险 ⚙️ 外部命令

Route Media Tasks Through MediaKit

Complex media requests require the correct MediaKit domain and command contract. This skill routes requests and explains shared CLI setup, modes, inputs, and task polling.

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "byted-mediakit-shared" from https://skillstore.io/skills/volcengine-byted-mediakit-shared.md and its manifest at https://skillstore.io/api/skills/volcengine-byted-mediakit-shared/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/volcengine-byted-mediakit-shared.md 已签名 manifest GET /api/skills/volcengine-byted-mediakit-shared/manifest 已签名 lockfile GET /api/skills/volcengine-byted-mediakit-shared/lockfile

测试它

正在使用“byted-mediakit-shared”。 Remove background noise from an interview and prepare the audio for editing.

预期结果:

Selected the audio domain. Required inputs are the source media, desired output format, and any voice preservation requirements.

正在使用“byted-mediakit-shared”。 Enhance a local video in cloud mode and wait for completion.

预期结果:

Cloud upload confirmation is required. After submission, the workflow polls the returned task identifier and reports the final media result.

正在使用“byted-mediakit-shared”。 Resize a folder of product images while preserving quality.

预期结果:

Selected the image domain. The next step is to inspect batch support, size constraints, output format, and local processing availability.

安全审计

高风险

v1 • 2026/9/12 打开版本化报告

Most alerts are false positives caused by Markdown backticks, Chinese text, and task identifiers. Several command blocks execute or update external software, while local media can be uploaded through cloud mode without explicit per-file consent.

已扫描文件

256

分析行数

复核项

已忽略误报

已确认安全问题 (1)

高

SKILL.md:120-127

Implicit Local Media Upload

The skill passes local paths to an adapter that uploads files. Cloud-first configuration can transmit sensitive media without explicit per-file consent.

The instructions explicitly state that the media adapter handles uploads and that current configuration may select Cloud-first mode.

能力复核项 (9)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

SKILL.md:77-79

Ruby/shell backtick execution

```bash

The block runs an unpinned npm package through npx with automatic confirmation. This exposes users to package supply-chain and installation risks.

高

SKILL.md:90-92

Ruby/shell backtick execution

```bash

The block executes an unpinned npm package with automatic confirmation to reinstall skills. Remote package execution creates a supply-chain risk.

高

SKILL.md:156-160

Ruby/shell backtick execution

```bash

The block includes an update command that can replace installed software. Automatic software updates create integrity and supply-chain exposure.

中

SKILL.md:24

Ruby/shell backtick execution

1. 通过本 Skill 或领域 Skill **实际执行** `mediakit-cli` 业务命令时,必须在同一次

The instruction explicitly directs the agent to execute mediakit-cli business commands. This grants an external process access to user media and configured services.

中

SKILL.md:34-37

Ruby/shell backtick execution

```bash

The fenced block contains media processing and cloud task query commands with substituted values. Executing these commands can access files and network services.

中

SKILL.md:96-100

Ruby/shell backtick execution

```bash

The commands initialize MediaKit, read its configuration, and inspect local dependencies. They execute an external binary and may access or modify local configuration.

中

SKILL.md:132-135

Ruby/shell backtick execution

```bash

The command templates invoke local or cloud media tools with variable domains, tools, and flags. Execution can affect files or transmit data.

中

SKILL.md:140-142

Ruby/shell backtick execution

```bash

The command changes the MediaKit output path using a substituted directory value. This mutates local configuration and requires validated arguments.

中

SKILL.md:148-150

Ruby/shell backtick execution

```bash

The block invokes the external CLI to query a cloud task with a substituted identifier. This performs a network-backed operation through configured credentials.

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/volcengine-byted-mediakit-shared/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/volcengine-byted-mediakit-shared/security.svg)](https://skillstore.io/skills/volcengine-byted-mediakit-shared?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/volcengine-byted-mediakit-shared?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/volcengine-byted-mediakit-shared/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/volcengine-byted-mediakit-shared.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

volcengine. (2026). byted-mediakit-shared security audit report (audit version 1) [Author version 0.2.1]. Skillstore. https://skillstore.io/skills/volcengine-byted-mediakit-shared/audits/1

BibTeX 引用

@techreport{volcengine-volcengine-byted-mediakit-shared-2026,
  author = {volcengine},
  title = {byted-mediakit-shared security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/volcengine-byted-mediakit-shared/audits/1},
  note = {Author version 0.2.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "byted-mediakit-shared security audit report (audit version 1)"
version: "0.2.1"
type: report
authors:
  - name: "volcengine"
date-released: "2026-09-12"
url: "https://skillstore.io/skills/volcengine-byted-mediakit-shared/audits/1"
identifiers:
  - type: other
    value: "skillstore:volcengine-byted-mediakit-shared:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

100

可维护性

内容

社区

规范符合性

你能构建什么

Plan a Video Edit

Select the editing skill and identify required inputs before processing existing footage.

Prepare Batch Images

Route resizing, compression, recognition, or image quality requests to the image workflow.

Coordinate Media Automation

Choose local or cloud execution and track asynchronous tasks across a production workflow.

试试这些提示

Choose a Media Domain

I need to [goal] with [media type]. Identify the MediaKit domain skill and ask for missing information before processing.

Inspect a Media Tool

For [goal], load the correct domain skill. Inspect the selected tool help, schema, and reference, then summarize required inputs.

Run a Local Workflow

Process [input path] for [goal]. Prefer local mode, confirm tool support, validate parameters, and report the output location.

Manage a Cloud Pipeline

Build a MediaKit workflow for [inputs] and [deliverable]. Confirm uploads, execute validated commands, poll genuine task IDs, and summarize results.

最佳实践

State the media type, processing goal, and expected output before choosing a domain.
Inspect current help, schema, and reference documentation before constructing parameters.
Confirm cloud uploads and use only genuine task identifiers returned by MediaKit.

避免

Do not guess a tool when the user has not stated a processing goal.
Do not invent paths, URLs, task identifiers, enum values, or business parameters.
Do not assume local and cloud modes expose identical parameters or results.

常见问题

Does this skill edit media directly?

No. It routes requests and explains shared CLI behavior. Domain skills provide specific tools and parameters.

Which media domains are supported?

It routes audio, video editing, image processing, and video understanding or enhancement workflows.

Is MediaKit CLI required?

Yes. The workflow requires mediakit-cli and may require local media dependencies.

Can processing remain local?

Some tools support local mode. Check the selected domain skill, tool reference, help, and schema first.

Can local files be uploaded?

Yes. The CLI adapter may upload local media in cloud mode, so confirm the destination and user consent.

How are asynchronous tasks checked?

Use the shared query protocol with the genuine task identifier returned by a cloud operation.

开发者详情

作者

volcengine

许可证

MIT

作者版本

v0.2.1

Skillstore 修订

仓库

https://github.com/volcengine/mediakit-cli/tree/120059a6c4a089fb580edd24d8ecf93d687e3c96/skills/byted-mediakit-shared

引用

5526951beaeca22519572a471618555839b53b05

维护新鲜度

2026/9/14

使用量

0 次下载 · 0 次浏览

文件结构

📄 LICENSE

📁 reference/

📄 query_task.md

📄 SKILL.md

byted-mediakit-shared

使用我的智能体安装

Agent 可读资源

测试它

安全审计

已确认安全问题 (1)

风险因素

复制报告链接

Markdown 徽章

HTML 徽章

嵌入卡片

APA 引用

BibTeX 引用

CITATION.cff

Skillstore 评分

你能构建什么

Plan a Video Edit

Prepare Batch Images

Coordinate Media Automation

试试这些提示

最佳实践

避免

常见问题

开发者详情