技能 video-edit
📦
video-edit
內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取
Edit Videos with Intent-Routed AI Models
Choosing the wrong video model wastes time and weakens identity or motion consistency. This skill routes each edit to a suitable RunComfy model with focused prompts.
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "video-edit" from https://skillstore.io/skills/genmedia-labs-video-edit.md and its manifest at https://skillstore.io/api/skills/genmedia-labs-video-edit/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「video-edit」。 Replace a talking-head background with a neutral office and keep the speaker unchanged.
預期結果:
Selected Wan 2.7 Edit-Video. The edit preserves face, pose, lip movement, framing, and original audio while changing only the background.
正在使用「video-edit」。 Make the target character follow the dance from a reference clip.
預期結果:
Selected Kling 2.6 Pro Motion Control. The target image defines character identity, while the reference video supplies motion and optional sound.
正在使用「video-edit」。 Change a walking subject's outfit to business attire without changing their face.
預期結果:
Selected Lucy Edit Restyle. The prompt limits the change to clothing and preserves the subject's face and motion at 720p.
安全審計
高風險v1 • 2026/8/13 開啟版本化報告
Most static alerts are false positives caused by Markdown backticks, placeholder HTTPS URLs, and ellipses misread as path traversal. Confirmed risks include unpinned third-party installation, external CLI execution, unsafe shell interpolation of user-derived JSON, and disclosed third-party processing of prompts and media.
1
已掃描檔案
226
分析行數
9
複核項目
0
已忽略的誤報
已確認的安全問題 (3)
高
Shell Injection Risk in Inline JSON Commands
Examples place prompts and media URLs inside single-quoted JSON passed through a shell. Line 222 considers only CLI expansion, but shell parsing occurs before the CLI receives the argument.
The skill is designed to insert user edit text into these commands, and the examples rely on shell quoting. One example manually escapes an apostrophe, but no general escaping requirement is defined.
中
Unpinned Third-Party Code Installation
The setup runs an unversioned npx tool against a mutable repository and globally installs the latest RunComfy CLI. A compromised future release could execute during installation.
Both commands visibly omit immutable versions or commit references. npm and npx installation can execute package lifecycle code.
低
Third-Party Processing of Prompts and Media
The CLI sends prompts to RunComfy, directs its servers to fetch supplied media URLs, and downloads generated results. Sensitive prompts or media leave the local environment.
The networking and third-party fetch behavior is explicitly documented. This is expected functionality, but it creates a clear privacy boundary.
能力複核項目 (9)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
高
Ruby/shell backtick execution
```bash
This block invokes the RunComfy CLI with inline JSON containing edit instructions and media locations. User-derived values cross a shell-command boundary and require robust argument escaping.
中
Ruby/shell backtick execution
on the wrong model. Calls `runcomfy run <vendor>/<model>/<endpoint>`
The skill explicitly delegates work to the local RunComfy CLI, which submits remote jobs and downloads output files. This is an intentional external-command capability with network and filesystem effects.
中
Ruby/shell backtick execution
```bash
The installation example runs an unversioned npx package against a mutable GitHub repository. This executes third-party package code and installs remote skill content.
中
Ruby/shell backtick execution
1. **RunComfy CLI** — `npm i -g @runcomfy/cli`
The prerequisite globally installs an unpinned npm package, which can execute package lifecycle code. This creates a real third-party supply-chain boundary.
中
Ruby/shell backtick execution
The skill picks one of Wan 2.7 Edit-Video / Kling 2.6 Pro Motion Control / Lucy Edit Restyle based o
The skill explicitly delegates work to the local RunComfy CLI, which submits remote jobs and downloads output files. This is an intentional external-command capability with network and filesystem effects.
風險因素
⚙️ 外部命令 (47)
SKILL.md:13 SKILL.md:27-29 SKILL.md:29-37 SKILL.md:37-49 SKILL.md:49-50 SKILL.md:50-51 SKILL.md:51-58 SKILL.md:58-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67 SKILL.md:68-69 SKILL.md:69 SKILL.md:70 SKILL.md:71-77 SKILL.md:77-85 SKILL.md:85-89 SKILL.md:89-98 SKILL.md:98-102 SKILL.md:102-104 SKILL.md:104-105 SKILL.md:105-112 SKILL.md:112-120 SKILL.md:120-121 SKILL.md:121-122 SKILL.md:122-123 SKILL.md:123-124 SKILL.md:124 SKILL.md:128-138 SKILL.md:138-143 SKILL.md:143-145 SKILL.md:145 SKILL.md:151-159 SKILL.md:159-160 SKILL.md:160-161 SKILL.md:161 SKILL.md:167-174 SKILL.md:174-178 SKILL.md:178-185 SKILL.md:185-190 SKILL.md:190-200 SKILL.md:200-217 SKILL.md:217 SKILL.md:221 SKILL.md:222-224 SKILL.md:224
🌐 網路存取 (10)
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/genmedia-labs-video-edit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/genmedia-labs-video-edit?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/genmedia-labs-video-edit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/genmedia-labs-video-edit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/genmedia-labs-video-edit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
genmedia-labs. (2026). video-edit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/genmedia-labs-video-edit/audits/1BibTeX 引用
@techreport{genmedia-labs-genmedia-labs-video-edit-2026,
author = {genmedia-labs},
title = {video-edit security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/genmedia-labs-video-edit/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "video-edit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "genmedia-labs"
date-released: "2026-08-13"
url: "https://skillstore.io/skills/genmedia-labs-video-edit/audits/1"
identifiers:
- type: other
value: "skillstore:genmedia-labs-video-edit:audit:1"
description: "Skillstore immutable audit report identifier"
比較變體
6 個可安裝變體每位作者的技能都保留為獨立的可安裝項目。推薦變體依 Skillstore 證據排序。
為何此變體排名第一
Skillstore 使用量較高
作者 / 來源 Skillstore 評分 證據置信度 Skillstore 使用量 已更新
skills-collective-video-edit
Skillstore 評分 38
證據置信度 中
Skillstore 使用量 41
已更新
2026-09-09
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
65
社群
91
規範符合度
你可以打造什麼
Polish Product Videos
Replace packaging or backgrounds while preserving framing, hand movement, camera motion, and source audio.
Transfer Character Motion
Map movement from a reference clip onto a target character while maintaining visual identity.
Restyle Short Social Clips
Change outfits, lighting, or atmosphere while preserving faces, poses, and motion.
試試這些提示
Simple Background Change
Edit {video_url}. Preserve the subject's face, pose, motion, and audio. Change only the background to {background_description}.Reference Packaging Swap
Use {reference_image_url} to replace the package design in {video_url}. Preserve framing, hand movement, camera motion, and original audio.Character Motion Transfer
Transfer motion from {motion_video_url} to the character in {character_image_url}. Keep the character identity and {sound_preference}.Constrained Restyle
Restyle {video_url} with {single_visual_change}. Preserve {identity_features}, {motion_features}, framing, and aspect ratio. Use {resolution} and seed {seed}.最佳實務
- State preservation requirements before the requested visual change.
- Request one edit direction per run to reduce temporal drift.
- Use reference media only when a specific appearance or motion must transfer.
避免
- Do not combine unrelated outfit, background, lighting, and character changes in one request.
- Do not send confidential media without approval for third-party processing.
- Do not interpolate untrusted prompts or URLs directly into shell command strings.
常見問題
Which model handles general video edits?
Wan 2.7 Edit-Video is the default for restyling, background changes, packaging swaps, and commercial polish.
Which model transfers motion from another video?
Kling 2.6 Pro Motion Control maps motion from a reference clip onto a target character.
Which model is suitable for outfit swaps?
Lucy Edit Restyle handles localized outfit, lighting, and atmospheric changes with identity preservation.
Can the skill preserve source audio?
Wan supports original audio, and Kling can retain reference sound. Available audio controls depend on the selected route.
Does processing occur locally?
No. The local CLI submits jobs to RunComfy, where prompts and referenced media are processed remotely.
What output limits apply?
Wan supports short clips up to 1080p, Kling supports route-dependent durations, and Lucy is limited to 720p without aspect control.
開發者詳細資訊
授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
儲存庫
https://github.com/genmedia-labs/skills/tree/9f1b4c229cb9e0c962f11ef24c8c87d5f004f393/video-edit引用
68046dfc1c93b48a04e43344644ad77d3a895012
維護新鮮度
2026/8/13
使用量
0 次下載 · 0 次瀏覽
檔案結構
📄 SKILL.md