kaipai-video-remove-subtitle
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
meitu-kaipai-clipackage and remote video assets. These downloads target official Meitu services and established package registries (NPM), which are considered safe sources. - [COMMAND_EXECUTION]: The skill executes shell commands using the
kaipaiCLI to process videos. These commands are constrained to the tool's primary purpose (subtitle removal) and follow established platform security guidelines such as path escaping and avoiding the execution of arbitrary strings from server responses. - [REMOTE_CODE_EXECUTION]: While the skill installs a CLI via NPM, it uses version pinning (
0.1.8) and official package names, mitigating risks of arbitrary code injection from unknown sources. - [DATA_EXFILTRATION]: The skill manages video uploads to Meitu's official CDN for processing. This is a core functional requirement and does not involve unauthorized data movement or credential harvesting.
Audit Metadata