技能 souldub-video-translate

📦

souldub-video-translate

Name: souldub-video-translate
Author: gravityvortex

內容修訂 r1 安全 🌐 網路存取🔑 環境變數⚙️ 外部命令📁 檔案系統存取

Translate and Dub MP4 Videos with SoulDub

Video localization requires coordinated uploads, dubbing tasks, and subtitle downloads. This skill automates SoulDub translation workflows and tracks progress across long-running jobs.

支援: Claude Codex Code(CC)

🥉 79 銅級

Maintain this Skill? Claim it 🥉 79 銅級

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "souldub-video-translate" from https://skillstore.io/skills/gravityvortex-souldub-video-translate.md and its manifest at https://skillstore.io/api/skills/gravityvortex-souldub-video-translate/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/gravityvortex-souldub-video-translate.md 已簽名 manifest GET /api/skills/gravityvortex-souldub-video-translate/manifest 已簽名 lockfile GET /api/skills/gravityvortex-souldub-video-translate/lockfile

測試它

正在使用「souldub-video-translate」。 Translate an approved local MP4 into Spanish after correcting the API endpoint.

預期結果:

Illustrative success: Translation completed.
Translated video: result.mp4
Target-language subtitles: translated.srt
Bilingual subtitles: bilingual.srt
The completion response also provides the output directory and saved state path.

正在使用「souldub-video-translate」。 Retry downloads for a completed translation when video retrieval fails.

預期結果:

Illustrative partial result: Subtitle files were saved, but video retrieval failed after retries.
The existing task remains available through its saved state.
Continue downloading from that state without uploading again.

安全審計

安全

v1 • 2026/10/18 開啟版本化報告

Most alerts match Markdown formatting, service identifiers, documented authentication, or expected translation traffic. Confirmed risks include credentials sent to an unrelated fallback host and predictable temporary log paths vulnerable to local symlink attacks. No evidence found of prompt injection or deliberate credential theft in the reviewed files.

已掃描檔案

2,596

分析行數

複核項目

已忽略的誤報

能力複核項目 (9)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

scripts/video_translation.py:546

HTTP client library

response = self.session.request(method, url, headers=self.headers(extra_headers), timeout=60, **kwar

Requests attach the API key to an unvalidated api_base. First-use configuration can override the valid bundled endpoint with xxx.com, sending the bearer credential there.

高

scripts/video_translation.py:36

Hardcoded URL

DEFAULT_API_BASE = "https://xxx.com/api/v1"

The active fallback is https://xxx.com/api/v1, not the bundled SoulDub endpoint. Authentication setup persists this fallback, enabling subsequent credential-bearing requests to that unrelated host.

高

scripts/video_translation.py:816

Configuration library

client = SoulDubClient(str(config.get("api_base") or DEFAULT_API_BASE), api_key, state)

This constructs an authenticated client from the merged API base without destination validation. Generated user configuration overrides the valid bundled endpoint with xxx.com.

高

scripts/video_translation.py:841

Configuration library

client = SoulDubClient(str(config.get("api_base") or DEFAULT_API_BASE), api_key, state)

This constructs an authenticated client from the merged API base without destination validation. Generated user configuration overrides the valid bundled endpoint with xxx.com.

高

scripts/video_translation.py:534

Generic API/secret keys

"Authorization": f"Bearer {self.api_key}",

This attaches the bearer key to every configured API destination. The generated user configuration selects xxx.com, so ordinary setup can disclose the credential outside SoulDub.

高

scripts/video_translation.py:816

Generic API/secret keys

client = SoulDubClient(str(config.get("api_base") or DEFAULT_API_BASE), api_key, state)

This constructs an authenticated client from the merged API base without destination validation. Generated user configuration overrides the valid bundled endpoint with xxx.com.

高

scripts/video_translation.py:841

Generic API/secret keys

client = SoulDubClient(str(config.get("api_base") or DEFAULT_API_BASE), api_key, state)

This constructs an authenticated client from the merged API base without destination validation. Generated user configuration overrides the valid bundled endpoint with xxx.com.

高

SKILL.md:64

Hardcoded URL

api_base: "https://xxx.com/api/v1"

The actionable user configuration example selects xxx.com beside the API key field. Copying it routes authenticated requests outside SoulDub instead of using the bundled endpoint.

中

scripts/background_translate.py:70

Temp file creation

control_dir = Path(tempfile.gettempdir()) / "souldub-video-translate" / "background" / safe_run_name

Logs use a predictable shared temporary path, exist_ok=True, and ordinary write-mode opens. Another local user can precreate symlinks to redirect or truncate writable files.

風險因素

🌐 網路存取 (21)

🔑 環境變數 (50)

⚙️ 外部命令 (50)

scripts/background_translate.py:95 scripts/video_translation.py:80 scripts/video_translation.py:147 SKILL.md:11 SKILL.md:17 SKILL.md:18 SKILL.md:22 SKILL.md:23 SKILL.md:25 SKILL.md:29-34 SKILL.md:34-36 SKILL.md:36 SKILL.md:44-46 SKILL.md:46-50 SKILL.md:50-52 SKILL.md:52-54 SKILL.md:54 SKILL.md:58-59 SKILL.md:59-63 SKILL.md:63-66 SKILL.md:66-72 SKILL.md:72-74 SKILL.md:74-78 SKILL.md:78-80 SKILL.md:80-82 SKILL.md:82 SKILL.md:85-86 SKILL.md:86-87 SKILL.md:87-88 SKILL.md:88-89 SKILL.md:89 SKILL.md:94-96 SKILL.md:96-100 SKILL.md:100-102 SKILL.md:102-106 SKILL.md:106-108 SKILL.md:108-110 SKILL.md:110 SKILL.md:118 SKILL.md:120 SKILL.md:121 SKILL.md:127-137 SKILL.md:137-143 SKILL.md:143-145 SKILL.md:145-147 SKILL.md:147-149 SKILL.md:149-151 SKILL.md:151-153 SKILL.md:153-155 SKILL.md:155

📁 檔案系統存取 (6)

scripts/background_translate.py:14 scripts/background_translate.py:70 SKILL.md:51 SKILL.md:59 SKILL.md:51 SKILL.md:59

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/gravityvortex-souldub-video-translate/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/gravityvortex-souldub-video-translate/security.svg)](https://skillstore.io/skills/gravityvortex-souldub-video-translate?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/gravityvortex-souldub-video-translate?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gravityvortex-souldub-video-translate/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/gravityvortex-souldub-video-translate.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

gravityvortex. (2026). souldub-video-translate security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/gravityvortex-souldub-video-translate/audits/1

BibTeX 引用

@techreport{gravityvortex-gravityvortex-souldub-video-translate-2026,
  author = {gravityvortex},
  title = {souldub-video-translate security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/gravityvortex-souldub-video-translate/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "souldub-video-translate security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "gravityvortex"
date-released: "2026-10-18"
url: "https://skillstore.io/skills/gravityvortex-souldub-video-translate/audits/1"
identifiers:
  - type: other
    value: "skillstore:gravityvortex-souldub-video-translate:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Localize educational videos

Translate recorded lessons and obtain bilingual subtitles for review before distribution.

Dub product demonstrations

Create localized product videos while tracking long-running translation jobs.

Recover translation deliverables

Find saved client runs and retry result downloads without submitting another billable translation task.

試試這些提示

Check readiness

Check authentication readiness and validate Spanish as a target language. Identify endpoint safety problems without uploading a video or exposing credentials.

Translate one video

Translate [absolute MP4 path] into Spanish with automatic source detection. Confirm the SoulDub endpoint and upload permission before starting.

Track a background dubbing job

Dub [absolute MP4 path] from English into Japanese with two speakers. Verify endpoint safety, start in the background, and report meaningful progress changes.

Recover completed results

Inspect [saved state path] and verify the configured SoulDub endpoint. Retry result downloads without creating a task, then report subtitle and video outcomes separately.

最佳實務

Correct and verify the SoulDub API endpoint before supplying credentials; avoid shared environments until temporary log handling is hardened.
Confirm permission to upload the video and use its speakers' voices before creating a translation task.
Retain the saved state path and review translated subtitles and audio before publishing results.

避免

Copying the current xxx.com configuration example or placing API keys in prompts and shared logs.
Uploading confidential recordings or using speakers' voices without appropriate permission.
Creating another translation task solely because a completed result download failed.

常見問題

Which video files are supported?

The helper accepts local MP4 files up to 5 GiB. Rounded duration must be between 1 and 1800 seconds.

Do I need a SoulDub account and credits?

Yes. You need an API key and sufficient credits. Task creation consumes credits according to the service configuration.

Is the current configuration ready to use?

No. Generated configuration can select xxx.com instead of SoulDub. Correct the endpoint before adding credentials, and harden temporary log creation.

Can I choose languages by name?

Yes. The helper recognizes registered English and Chinese names or language codes. Source detection can be automatic, but the target must be explicit.

What files does a successful job download?

By default, it saves result.mp4, translated.srt, and bilingual.srt. Existing destination names receive numeric suffixes to avoid silent overwrites.

Can I recover results after a download failure?

Yes. Continue downloading with the saved state file. The helper refreshes temporary media URLs without creating another translation task.