videoagent-video-studio

Warn

Audited by Runlayer on Mar 8, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
88%
Files
22
Flagged
7
Chunks
24
Flagged Files (7)
videoagent-video-studio/scripts/test-api.ps1MEDIUM
88.1%

Risky tool definition detected

执行 # ============================================================ Write-Host "`n🎬 video-studio API 测试" -ForegroundColor Yellow Write-Host " FAL_KEY: $(if ($FalKey) { '已设置 (' + $FalKey.Substring(0, [Math]::Min(8, $FalKey.Length)) + '...)' } else { '未设置' })" Write-Host " ProxyUrl: $(if ($ProxyUrl) { $ProxyUrl } else { '未设置' })" Write-Host " TestMode: $TestMode" if ($TestMode -eq "all" -or $TestMode -eq "fal") { Test-FalDirect } if ($TestMode -eq "all" -or $TestMode -eq "proxy") { Test-Proxy } Writ

videoagent-video-studio/proxy/api/generate.jsMEDIUM
77.9%

Risky tool definition detected

} * model: minimax | kling | veo | hunyuan | pixverse | grok | seedance * Env: FAL_KEY (all models including seedance via fal.ai) */ const { fal } = require("@fal-ai/client"); const { getModel, listModels, resolveModel, FAL } = require("../models.js"); const FAL_KEY = process.env.FAL_KEY || ""; const VALID_TOKENS = (process.env.VALID_TOKENS || "").split(",").filter(Boolean); const FREE_LIMIT_PER_IP = Math.max(0, parseInt(process.env.FREE_LIMIT_PER_IP || "100", 10)); const { getIssuedToken, getTo

videoagent-video-studio/scripts/test-proxy.cjsMEDIUM
75.7%

Tool passed security scan

Risky tool definition detected

use fresh require cache bust delete require.cache[require.resolve(path.join(proxyDir, "api/generate.js"))]; const freshHandler = require(path.join(proxyDir, "api/generate.js")); // issue fresh token (old store state preserved) const tr = mockRes(); await tokenHandler(mockReq("POST", {}, {}, "no.fal.key.ip"), tr); const tok = tr._body.token; const req = mockReq("POST", { mode: "text-to-video", prompt: "test", model: "minimax" }, { authorization: `Bearer ${tok}` } ); const res = mockRes(); await f

videoagent-video-studio/scripts/test-generate.ps1LOW
69.2%

Tool passed security scan

videoagent-video-studio/proxy/README.mdLOW
69.0%

Tool passed security scan

videoagent-video-studio/scripts/test-generate.shLOW
65.1%

Tool passed security scan

videoagent-video-studio/proxy/api/token.jsLOW
60.7%

Tool passed security scan

Passed Files (15)Click to expand
videoagent-video-studio/scripts/local-server.cjsOK
42.2%

Tool passed security scan

videoagent-video-studio/README.mdOK
38.7%

Tool passed security scan

videoagent-video-studio/proxy/api/status.jsOK
37.9%

Tool passed security scan

videoagent-video-studio/proxy/models.jsOK
37.0%

Tool passed security scan

videoagent-video-studio/tools/generate.jsOK
36.4%

Tool passed security scan

videoagent-video-studio/proxy/usage-store.jsOK
35.7%

Tool passed security scan

videoagent-video-studio/references/calling_guide.mdOK
29.9%

Tool passed security scan

videoagent-video-studio/proxy/package-lock.jsonOK
22.9%

Tool passed security scan

videoagent-video-studio/references/models.mdOK
18.9%

Tool passed security scan

videoagent-video-studio/SKILL.mdOK
12.1%

Tool passed security scan

videoagent-video-studio/proxy/vercel.jsonOK
8.1%

Tool passed security scan

videoagent-video-studio/references/prompt_guide.mdOK
5.1%

Tool passed security scan

videoagent-video-studio/proxy/package.jsonOK
4.8%

Tool passed security scan

videoagent-video-studio/package.jsonOK
2.7%

Tool passed security scan

videoagent-video-studio/package-lock.jsonOK
1.3%

Tool passed security scan

Audit Metadata
Max File Score
88%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
22
Files Flagged
7
Chunks Analyzed
24
Analyzed
Mar 8, 2026, 07:15 AM
Security Audit — runlayer — videoagent-video-studio