free-short-video@6.2.1
Free AI short-video generator — run the full free-short-video service locally with one command. Text-to-video, image generation, Edge-TTS narration, subtitles, and compositing, all free. Official site: https://video.lichuanyang.top
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection found a user-invoked local-service launcher and ordinary API authentication to fixed service endpoints, not an install-time or covert attack. No concrete malicious behavior was identified.
Decision evidence
public snapshot- The package exposes a CLI and only a user-invoked start script; it has no npm lifecycle hook.
- The CLI creates a package-local Python environment, installs its declared Python requirements, and launches the bundled server only when the user runs the CLI.
- The CLI passes only host and port settings into the launched service.
- The service sends Agnes API requests to the fixed Agnes domain map using its configured API key.
Source & flagged code
5 flaggedA single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L179Findings
Affected versions and remediation
This report applies to free-short-video@6.2.1.
See all versions of free-short-video for other recorded verdicts.
- Review the evidence and your use of free-short-video@6.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.