remotion-synced-video

SUSPICIOUS. The core behavior matches a media-generation skill, and most dependencies are standard developer tooling, but risk is elevated by unpinned installs, browser-binary downloads, web scraping, and especially the undocumented transitive dependency on a separate doubao-open-tts skill that may receive TTS credentials. No confirmed malware or covert exfiltration is visible in the provided skill text.

This appears to be an image-search utility rather than malware. It has significant input-handling risks: crafted scene IDs can enable shell command injection in placeholder generation and path traversal in output filenames. Unrestricted image URLs and redirects also allow requests to unintended hosts and potentially local services. Use only trusted scene data and constrain paths and network destinations before use.

This is an image-generation utility, not overt malware. However, its shell command construction creates a command-injection risk when outputPath is untrusted, and caller-controlled paths and dimensions are not constrained. Use spawn/execFile with separate arguments and validate paths and dimensions.

The script is an image-search and download utility, not evidently malware. However, it has two Python code-injection risks caused by interpolating command-line or page-derived text into python3 -c source. It also downloads page-derived URLs without host or content validation and uses predictable temporary paths. Avoid untrusted queries or page content until the interpolation is replaced with safe data passing and temporary files are handled securely.

The script has a concrete Python code-injection risk because untrusted query input is inserted into Python source. It also downloads page-derived URLs without host validation and uses a predictable temporary file. The observed behavior is consistent with an image-downloading utility; the fragment provides no clear evidence of intentional malware.

This is an image-scraping script, not clearly malware. However, its user-controlled query is embedded in executable Python source and can enable code injection when crafted, and downloaded URLs are not destination-restricted. Avoid untrusted queries and consider passing the query as an argument to Python and validating download hosts.

This is an image-search and download utility, with no clear evidence of intentional malware or data theft. However, the unescaped query interpolation into shell and Python code creates a command/code injection risk for untrusted arguments. Downloaded page-provided URLs are also insufficiently constrained and may reach unintended destinations, including through redirects.

The script's intended function is image searching and downloading. The direct interpolation of the user-controlled query into Python source creates a command-injection risk through Python code execution. Downloads also trust URLs extracted from page content and lack response-size and content validation. The fragment does not otherwise show clear malicious intent.

The script has a concrete Python code-injection vulnerability because QUERY is interpolated into python3 -c source. Page-derived URLs can also cause downloads from arbitrary HTTPS hosts when the fallback parser is used. The code otherwise appears intended for image scraping and shows no clear malware behavior.