byted-las-video-inpaint

The skill is purpose-aligned and its stated network flows match Volcengine LAS/TOS usage, so it does not look malicious. However, it requires an external CLI and sourced shell initialization without verifiable provenance in the skill materials, and it forwards API credentials to that tooling; this makes the skill high security risk but low malware confidence.

The code is an environment bootstrap and auto-update script, not clear malware. Its main security concern is supply-chain exposure: it downloads and installs a remote Python wheel without cryptographic integrity verification, allowing compromise of the hosting service, transport endpoint, or artifact to result in code execution. The operator ID is also unsafely interpolated into a jq filter, and the script modifies the sourcing shell environment. Review and pin the artifact with a trusted hash or signature, validate the manifest, and pass OPERATOR_ID to jq as data.