技能 lipsync

📦

lipsync

Name: lipsync
Author: prime-skills

內容修訂 r1 中風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

Create Lip-Synced Videos with RunComfy

Lip-sync workflows require different models for existing videos, portraits, and scripts. This skill selects a suitable RunComfy route and prepares the corresponding CLI workflow.

支援: Claude Codex Code(CC)

📊 69 尚可

Maintain this Skill? Claim it 📊 69 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "lipsync" from https://skillstore.io/skills/prime-skills-lipsync.md and its manifest at https://skillstore.io/api/skills/prime-skills-lipsync/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/prime-skills-lipsync.md 已簽名 manifest GET /api/skills/prime-skills-lipsync/manifest 已簽名 lockfile GET /api/skills/prime-skills-lipsync/lockfile

測試它

正在使用「lipsync」。 I have an approved interview video and a translated voiceover. Final delivery quality matters more than cost.

預期結果:

Recommended route: Sync Labs sync v2 Pro.
Required inputs: source video URL and translated voiceover URL.
Preparation: use clean speech and align audio and video durations.
Next step: confirm rights and review the prepared invocation before submission.

正在使用「lipsync」。 I have my own portrait and a recording of my voice. I need a talking presenter.

預期結果:

Recommended route: OmniHuman.
Required inputs: portrait URL and voice recording URL.
Preparation: select a clear head-and-shoulders or upper-body portrait.
This route derives animation from the image and audio rather than a scene prompt.

正在使用「lipsync」。 I have an original script but no audio recording. I need speech and video together.

預期結果:

Consider Kling text-to-video lipsync or HappyHorse text-to-video.
These routes generate speech rather than matching a fixed recording.
Check the current model schema before preparing an invocation.

安全審計

中風險

v1 • 2026/10/23 開啟版本化報告

All 76 static findings are false positives involving Markdown, reference URLs, model-selection advice, or documented token storage. One semantic concern remains: the shell-injection safety claim overlooks unsafe shell interpolation of user-controlled JSON. No evidence found of malicious instructions or credential exfiltration; external CLI behavior was not independently verified.

已掃描檔案

237

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

中

SKILL.md:110-117 SKILL.md:221

Shell Safety Claim Omits Host-Shell Quoting

The claim "No shell-injection surface" overlooks shell parsing before CLI execution. Directly inserting user-controlled JSON into the demonstrated single-quoted argument can permit command injection.

The examples use single-quoted JSON while the safety claim only addresses CLI expansion. Exploitation depends on unsafe interpolation; no executable vulnerable wrapper is supplied.

風險因素

⚙️ 外部命令 (38)

🌐 網路存取 (28)

📁 檔案系統存取 (2)

SKILL.md:220 SKILL.md:220

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/prime-skills-lipsync/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/prime-skills-lipsync/security.svg)](https://skillstore.io/skills/prime-skills-lipsync?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/prime-skills-lipsync?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/prime-skills-lipsync/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/prime-skills-lipsync.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

prime-skills. (2026). lipsync security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/prime-skills-lipsync/audits/1

BibTeX 引用

@techreport{prime-skills-prime-skills-lipsync-2026,
  author = {prime-skills},
  title = {lipsync security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/prime-skills-lipsync/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "lipsync security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "prime-skills"
date-released: "2026-10-23"
url: "https://skillstore.io/skills/prime-skills-lipsync/audits/1"
identifiers:
  - type: other
    value: "skillstore:prime-skills-lipsync:audit:1"
    description: "Skillstore immutable audit report identifier"

比較變體

4 個可安裝變體

每位作者的技能都保留為獨立的可安裝項目。推薦變體依 Skillstore 證據排序。

為何此變體排名第一

Skillstore 評分最高

作者 / 來源 Skillstore 評分證據置信度 Skillstore 使用量已更新

prime-skills 推薦目前

prime-skills-lipsync

Skillstore 評分 69

證據置信度中

Skillstore 使用量 2

已更新

2026-10-24

agentspace-so

agentspace-so-lipsync

Skillstore 評分 38

證據置信度高

Skillstore 使用量 48

已更新

2026-10-22

runcomfy-com

runcomfy-com-lipsync

Skillstore 評分 38

證據置信度中

Skillstore 使用量 43

已更新

2026-09-09

doany-ai

doany-ai-lipsync

Skillstore 評分 38

證據置信度中

Skillstore 使用量 43

已更新

2026-09-09

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Localize an Existing Video

Pair an authorized source video with translated voiceover and choose the appropriate Sync Labs tier.

Animate a Presenter Portrait

Use an approved portrait and voice recording to prepare an OmniHuman presenter workflow.

Choose a Script-Based Route

Compare documented generation routes for an original script when no recorded voiceover is available.

試試這些提示

Choose a Lip-Sync Model

I have an authorized video and voiceover recording. Recommend the simplest lip-sync route and list the required inputs without running anything.

Prepare a Talking Portrait

Prepare an OmniHuman workflow using [portrait URL] and [audio URL]. Confirm face and voice consent, and show the invocation before execution.

Plan a Premium Video Dub

Use [video URL] and [translated audio URL] for a consented premium dub. Check duration alignment and prepare Sync Labs Pro arguments.

Plan a Multilingual Production

Plan separate OmniHuman jobs for [portrait URL] and [audio URL list]. Confirm consent, safely serialize inputs, and separate outputs. Request approval before execution.

最佳實務

Confirm permission for both the face and voice before sending assets to an external generation service.
Use clean voice recordings and align audio duration with the source video.
Pass serialized JSON as a literal argument through an argument-array API or apply shell-safe quoting.

避免

Using a real person's face or voice without permission.
Choosing script-generated speech when exact synchronization to an existing recording is required.
Inserting untrusted prompts or URLs directly into shell command text.

常見問題

Which model should I use for an existing video?

The skill recommends Sync Labs sync v2 for drafts and Pro for premium delivery. Kling and Creatify are alternative routes.

Can I start with a single portrait?

Yes. The documented OmniHuman route accepts a portrait URL and an audio URL.

Can I generate speech from a script?

The skill recommends Kling text-to-video lipsync or HappyHorse. Check current model documentation because complete script-route commands are not included.

Does the skill run locally?

The CLI runs locally, but generation uses RunComfy's hosted Model API. Authentication and network access are required.

Does the skill enforce consent automatically?

No. It instructs operators to confirm face and voice consent, but does not implement an input gate.

How are results saved?

The documented workflow downloads supported RunComfy result URLs into the output directory selected through the CLI.

開發者詳細資訊

作者

prime-skills

授權

MIT

Skillstore 修訂

版本提示

作者未聲明版本。

儲存庫

https://github.com/prime-skills/runcomfy-agent-skills/tree/fca19ae084c2ae4667f5c8affbb99da5103d5832/lipsync

引用

5893493b99d0bdd120c437906b07718a60acc880

維護新鮮度

2026/10/23

使用量

0 次下載 · 0 次瀏覽

檔案結構

📄 SKILL.md