扫描报告
0 /100
nemo-subtitle
AI Subtitle: Add, Burn, Translate Subtitles to Video
This is a pure documentation skill (SKILL.md only) that describes a legitimate subtitle generation API service with no executable code or suspicious behavior.
可以安装
No action needed. This is a well-documented API wrapper for video subtitle generation.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in documentation |
| 网络访问 | READ | READ | ✓ 一致 | Uses API endpoints for upload/download - declared and necessary |
| 命令执行 | NONE | NONE | — | No shell commands documented |
| 环境变量 | READ | READ | ✓ 一致 | Reads NEMOVIDEO_API_KEY for auth - declared and necessary |
| 技能调用 | NONE | NONE | — | No nested skill invocations |
| 剪贴板 | NONE | NONE | — | No clipboard access documented |
| 浏览器 | NONE | NONE | — | No browser automation documented |
| 数据库 | NONE | NONE | — | No database access documented |
5 项发现
中危 外部 URL 外部 URL
https://nemovideo.com SKILL.md:23 中危 外部 URL 外部 URL
https://mega-api-prod.nemovideo.ai SKILL.md:24 中危 外部 URL 外部 URL
https://cdn.nemovideo.ai/outputs/job_gen_789/subtitles.srt SKILL.md:330 中危 外部 URL 外部 URL
https://cdn.nemovideo.ai/outputs/job_gen_789/subtitles.vtt SKILL.md:331 中危 外部 URL 外部 URL
https://cdn.nemovideo.ai/outputs/job_gen_789/transcript.txt SKILL.md:332 目录结构
1 文件 · 12.6 KB · 446 行 Markdown 1f · 446L
└─
SKILL.md
Markdown
安全亮点
✓ Pure markdown documentation with no executable code
✓ All API endpoints clearly documented with request/response examples
✓ Credential requirement (NEMOVIDEO_API_KEY) explicitly declared and necessary for authentication
✓ No hidden functionality or shadow behavior
✓ No obfuscation techniques (base64, eval, atob)
✓ No credential harvesting beyond the declared API token
✓ Network communication limited to documented API domain (nemovideo.ai)
✓ No suspicious patterns: no reverse shell, C2, data exfiltration
✓ No supply chain risks as there are no dependencies
✓ No filesystem write operations that could introduce persistence mechanisms