smart-short-video
Generates engaging short videos by mixing AI-generated images with original video clips for platforms like TikTok and Reels.
Install this skill
Security score
The smart-short-video skill was audited on May 31, 2026 and we found 14 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Direct command execution function call
| 259 | execSync(\`ffmpeg -y -i \"\${src}\" -c:v libx264 -profile:v baseline -level 3.0 -pix_fmt yuv420p -c:a aac -b:a 128k -movflags +faststart \"\${dst}\"\`, { stdio: 'inherit' }); |
Template literal with variable interpolation in command context
| 256 | const src = path.join(workDir, \`segments/segment_\${String(seg.index).padStart(3, '0')}.mp4\`); |
Template literal with variable interpolation in command context
| 257 | const dst = path.join('public/video-segments', \`segment_\${String(i).padStart(3, '0')}.mp4\`); |
Template literal with variable interpolation in command context
| 259 | execSync(\`ffmpeg -y -i \"\${src}\" -c:v libx264 -profile:v baseline -level 3.0 -pix_fmt yuv420p -c:a aac -b:a 128k -movflags +faststart \"\${dst}\"\`, { stdio: 'inherit' }); |
Template literal with variable interpolation in command context
| 260 | console.log(\`â [\${i}] segment_\${String(seg.index).padStart(3, '0')} -> segment_\${String(i).padStart(3, '0')}\`); |
Template literal with variable interpolation in command context
| 305 | console.log(\` ðŽ å―ąįå īæŊ: \${videoCount} (\${Math.round(videoCount/scenes.length*100)}%)\`); |
Template literal with variable interpolation in command context
| 306 | console.log(\` âĻ AI åį: \${aiImageCount} (\${Math.round(aiImageCount/scenes.length*100)}%)\`); |
Template literal with variable interpolation in command context
| 307 | console.log(\` ð ååšŦåį: \${libraryImageCount} (\${Math.round(libraryImageCount/scenes.length*100)}%)\`); |
Template literal with variable interpolation in command context
| 318 | console.log(\` å īæŊåææŽĄæļ: \${transitions}/\${scenes.length - 1}\`); |
Template literal with variable interpolation in command context
| 319 | console.log(\` åĪæĻĢæ§čĐå: \${diversityScore}%\`); |
Template literal with variable interpolation in command context
| 374 | return `/ai-images/${randomImage}`; |
Node child_process module reference
| 248 | const { execSync } = require('child_process'); |
Access to .env file
| 382 | if (process.env.OPENAI_API_KEY) { |
External URL reference
| 420 | POST https://open.bigmodel.cn/api/paas/v4/images/generations |