video-transcript

SUSPICIOUS。技能声明的核心能力与“视频转写”基本一致，但真实执行依赖未提供的本地 install.sh、transcript.py 和另一个 video-download skill，造成较大的安装信任与传递信任缺口。未见明确恶意或隐藏 exfiltration 证据，因此不判定为恶意；但在缺少脚本内容、下载源、版本固定和官方端点验证前，应按高供应链风险处理。

The code appears to be a video transcription utility rather than malware. It intentionally downloads/processes videos and uploads them to a configurable Doubao API. No clear backdoor, persistence, destructive behavior, reverse shell, cryptomining, or covert exfiltration mechanism is present. However, disabling TLS verification creates a significant credential and data interception risk, and configurable endpoint/environment handling requires trusted configuration. The supplied fragment is also syntactically incomplete because both transcription prompt assignments lack values.

该脚本是一个远程 skill 安装引导器，未显示直接恶意行为，但具有显著的供应链风险：它从未固定版本的 GitHub main 分支或 npx 包获取代码，并直接执行其中的 install.sh。应在隔离环境审查远程仓库内容，固定提交哈希并验证签名或校验和后再使用。

未发现本文件包含明确的恶意行为、凭据窃取或数据外传逻辑。主要安全风险是将远程 GitHub shell 脚本直接交给 bash 执行，以及对 Homebrew、pip 包和 Chromium 使用未固定版本且未进行完整性校验。API Key 被本地保存并设置为仅所有者可读，属于预期功能但应保护 .env 文件。无法据此判断未提供的 transcript.py 或所安装依赖的行为。

The supplied fragment is primarily README-style installation and usage documentation. It does not itself show malware, but the recommended curl-to-bash installer and unpinned multi-source dependency installation present a meaningful supply-chain risk. The stated privacy claim is inconsistent with the described upload of video content to Doubao/Volcengine. Review bootstrap.sh, install.sh, transcript.py, platform_extractor.py, requirements.txt, and exact downloaded artifacts before use; do not execute the one-line installer without inspecting and pinning its contents.