byted-kickart-video-subtitler

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask users to paste ACCESS_KEY_ID/SECRET_ACCESS_KEY into chat and to echo/export those values into shell commands (including an explicit echo of SECRET_ACCESS_KEY), which requires the LLM to handle and output secret values verbatim and thus creates an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The repository contains explicit social-engineering instructions to collect users' AK/SK in chat, uses those credentials to make authenticated API calls that can upload user files, and logs Authorization/headers to disk—together these behaviors enable credential theft and data exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 视频字幕“文本/时间戳数据”由用户在步骤6通过聊天输入生成字幕配置JSON并在 scripts/subtitler.py 中 json.load(captions) 读取后作为 captions 字段提交给后端，因此会把外部用户可控的自由文本直接喂给运行时处理。