可信 — 风险评分 0/100
上次扫描:2 天前 重新扫描
0 /100
reelsmith
Create short-form vertical video packages, preview reels, narrated reels, and AI-video workflows
Reelsmith is a legitimate video content creation skill that uses standard tools (ffmpeg subprocess, OpenAI API, LTX API) for video preview generation, TTS narration, and AI video synthesis. All capabilities are properly documented in SKILL.md.
技能名称reelsmith
分析耗时21.5s
引擎pi
可以安装
This skill is safe to use. The declared permissions (shell:WRITE via ffmpeg subprocess, filesystem:WRITE for temp/output files, network:READ via API calls) align with its documented video production functionality.
资源类型声明权限推断权限状态证据
文件系统 WRITE WRITE ✓ 一致 All scripts write to temp dirs and output paths; all documented in SKILL.md
命令执行 WRITE WRITE ✓ 一致 subprocess.run calls to ffmpeg in make_reel_preview.py, make_reel_preview_with_o…
网络访问 READ READ ✓ 一致 POST to ltx.video API (ltx_text_to_video.py), OpenAI API calls (openai_tts.py) -…
环境变量 READ READ ✓ 一致 OPENAI_API_KEY and LTX_API_KEY only; documented in SKILL.md
1 项发现
🔗
中危 外部 URL 外部 URL
https://api.ltx.video/v1/text-to-video
scripts/ltx_text_to_video.py:8

目录结构

7 文件 · 18.0 KB · 583 行
Python 6f · 346L Markdown 1f · 237L
├─ 📁 scripts
│ ├─ 🐍 ltx_text_to_video.py Python 45L · 1.2 KB
│ ├─ 🐍 make_reel_preview_with_opener.py Python 66L · 2.5 KB
│ ├─ 🐍 make_reel_preview.py Python 60L · 2.2 KB
│ ├─ 🐍 make_visual_reel_preview.py Python 115L · 3.9 KB
│ ├─ 🐍 mux_reel_audio.py Python 21L · 549 B
│ └─ 🐍 openai_tts.py Python 39L · 1.0 KB
└─ 📝 SKILL.md Markdown 237L · 6.6 KB

安全亮点

✓ All capabilities declared in SKILL.md match actual implementation
✓ No obfuscation, base64, or encoded payloads found
✓ No credential exfiltration - API keys only used for authenticated API calls
✓ No sensitive path access (~/.ssh, ~/.aws, .env) beyond declared env vars
✓ No reverse shells, C2, or data theft patterns
✓ subprocess usage is limited to ffmpeg for legitimate video processing
✓ API endpoints are well-known services (ltx.video, api.openai.com)
✓ Temporary files created in system temp directory with prefixes
✓ No unsigned/unversioned external dependencies