Skill Trust Decision
xzz-video-factory
合法视频生成流水线，存在API密钥硬编码和依赖版本未锁定问题，但无恶意行为证据
Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
1 lower-risk artifacts were extracted and still need context.
Block
Attack chain and severe findings
The report includes 0 attack-chain steps and 1 severe findings.
Review
Dependencies and supply chain hygiene
8 dependency or supply-chain issues need attention.
What drove the risk score up
硬编码API密钥 +15
tts_engine.py:18 包含明文MiniMax API密钥后备值
依赖版本未锁定 +8
所有依赖均无版本锁定，存在供应链风险
目录结构文档与实际不符 +2
SKILL.md声明pipeline/目录，实际为scripts/
Most important evidence
High Credential Theft
API密钥硬编码
tts_engine.py包含明文MiniMax API密钥后备值，若.env文件不存在则使用该密钥。密钥已公开暴露在代码中。
scripts/tts_engine.py:18 删除硬编码密钥，强制要求.env文件配置；或使用空字符串作为默认值并在缺失时抛出错误
Medium Supply Chain
依赖版本未锁定
SKILL.md和references/config.md中声明的依赖均无版本锁定约束，pip install时可能安装不兼容版本或含漏洞版本。
SKILL.md:23 使用pip freeze生成requirements.txt并锁定版本；或使用poetry/PDM管理依赖
Low Doc Mismatch
目录结构文档与实际不符
SKILL.md声称脚本位于pipeline/目录，但实际文件位于scripts/目录。不影响安全但影响可用性。
SKILL.md:1 统一文档与实际目录结构
Low Sensitive Access
硬编码本地路径暴露用户环境
多个脚本包含硬编码的Windows用户目录路径(C:\Users\85064\Desktop\...)，暴露开发者个人机器信息。
scripts/make_videos.py, scripts/analyze_ref.py:11-12, 28 使用相对路径或环境变量配置素材目录
Declared capability vs actual capability
Filesystem Pass
Declared WRITE
→ Inferred WRITE
多个脚本读写本地文件用于视频处理 Network Pass
Declared READ
→ Inferred READ
tts_engine.py:24 调用MiniMax API Shell Pass
Declared WRITE
→ Inferred WRITE
make_videos.py/analyze_ref.py 通过subprocess调用FFmpeg Environment Pass
Declared NONE
→ Inferred READ
tts_engine.py:13-16 读取MINIMAX_API_KEY等环境变量 Suspicious artifacts and egress
Medium External URL
https://api.minimax.chat/v1/t2a_v2 scripts/tts_engine.py:24
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| faster-whisper | * | pip | No | 无版本锁定 |
| aiohttp | * | pip | No | 无版本锁定 |
| pypinyin | * | pip | No | 无版本锁定 |
| jieba | * | pip | No | 无版本锁定 |
| pillow | * | pip | No | 无版本锁定 |
| numpy | * | pip | No | 无版本锁定 |
| edge-tts | * | pip | No | 无版本锁定 |
| python-dotenv | * | pip | No | 无版本锁定 |
File composition
6 files · 1364 lines
Python 4 files · 1127 linesMarkdown 2 files · 237 lines
Files of concern · 2
SKILL.md 依赖版本未锁定 · 目录结构文档与实际不符
scripts/tts_engine.py API密钥硬编码 · https://api.minimax.chat/v1/t2a_v2
Other files · make_videos.py · analyze_ref.py · text_corrector.py · config.md
Security positives
纯本地视频处理流水线，无数据外传行为
API密钥读取逻辑正确（优先.env，环境变量次之，硬编码仅作后备）
FFmpeg调用仅用于视频处理，范围合理
无Base64编码、eval()、subprocess管道等危险模式
未发现凭证收割、路径遍历或敏感文件访问