扫描报告
0 /100
video-knowledge-ingest
Ingest and summarize cross-platform videos into a local knowledge base
This is a legitimate video knowledge ingestion skill that declares all its capabilities clearly in documentation and uses standard tools (yt-dlp, ffmpeg, Whisper, summarize) for their intended purposes without any hidden or malicious behavior.
可以安装
This skill is safe to use. No security concerns identified.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | WRITE | WRITE | ✓ 一致 | SKILL.md declares 'local filesystem — persist transcript, summary, metadata, and… |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md declares 'yt-dlp — resolve metadata, fetch subtitles, or download media… |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md declares 'yt-dlp', 'ffmpeg', 'whisper-gpu.sh', 'summarize --cli codex' … |
4 项发现
中危 外部 URL 外部 URL
https://www.youtube.com/watch?v=... SKILL.md:80 中危 外部 URL 外部 URL
https://bilibili.com/video/BV... SKILL.md:81 中危 外部 URL 外部 URL
https://www.xiaohongshu.com/explore/... SKILL.md:82 中危 外部 URL 外部 URL
https://www.bilibili.com/video/... references/troubleshooting.md:36 目录结构
7 文件 · 30.2 KB · 882 行 Python 2f · 541L
Markdown 3f · 319L
Shell 2f · 22L
├─
▾
references
│ ├─
toolchain.md
Markdown
│ └─
troubleshooting.md
Markdown
├─
▾
scripts
│ ├─
video_ingest.py
Python
│ ├─
video-ingest.sh
Shell
│ ├─
whisper_gpu_transcribe.py
Python
│ └─
whisper-gpu.sh
Shell
└─
SKILL.md
Markdown
安全亮点
✓ All capabilities declared in SKILL.md match actual implementation
✓ Uses standard, well-known tools (yt-dlp, ffmpeg, faster-whisper) for documented purposes
✓ No credential harvesting or sensitive data exfiltration observed
✓ No obfuscation techniques (base64, eval, atob) detected
✓ No remote code execution patterns (curl|bash, wget|sh) found
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env) detected
✓ Proper subprocess handling with explicit command lists (no shell=True)
✓ URL parsing and normalization is well-structured with proper sanitization
✓ Documentation is thorough and accurate