newcut-video-clipping

This module performs Doubao ASR transcription, sending audio and configured API credentials to the default ByteDance endpoints or environment-configured URLs and saving results locally. Its local-command mode executes the explicitly configured DOUBAO_ASR_COMMAND or options.command, so untrusted configuration can result in arbitrary command execution; this is a significant configuration-dependent risk, not evidence of hidden malware. Severity is moderate when configuration is trusted and high if an attacker controls the command or endpoint settings.