io.github.CSOAI-ORG/video-editing-ai-mcp

Automatically split scenes, generate subtitles, and extract thumbnail data for videos.

Source

Official Registry

Updated

2026-08-19

// securityCaution

Runs locally
Official / curated
Open source
Community-trusted

Summary

This MCP tool is listed in an official registry and is open source, with no declared credentials or remote endpoints, and no clear high-risk red flags are evident. The main cautions are local code execution and likely read/write access to media files, with limited documentation reducing audit clarity.

CredentialsLow risk

The material explicitly states that no keys or environment variables are required. No API key, OAuth token, or other sensitive credential is requested, so credential leakage or misuse risk appears low.

Network egressLow risk

The material declares no remote host endpoints, and the README does not describe any external service connections or uploads of user video/subtitle data. Based on the available facts, no clear data egress path is identified.

Code executionCaution

The system flags this tool as executes-code. Given its scene splitting, subtitle generation, and thumbnail-related functions, it likely invokes local processing programs or executes related code. This is a normal capability for this type of MCP tool, but its runtime permission boundaries should be monitored.

Data accessCaution

As a video editing/processing tool, it would typically need to read input videos and may write subtitle files, split outputs, or thumbnail artifacts locally. The material does not show requests for system access beyond its stated function, but it should be confined to a dedicated working directory.

Supply chainCaution

Positive signals include its official registry source, auditable open-source repository, and updates within the last year, all of which materially reduce overall risk. However, the missing README, undeclared license, and very low community adoption (0 stars) mean supply-chain transparency is acceptable but ecosystem maturity is limited.

Recommendations

Run it in an isolated environment and restrict access to only the necessary media input and output directories.
Review the repository source and dependency list before first use, especially for any undeclared network activity.
Apply least-privilege controls to input/output paths and avoid exposing unrelated sensitive files.
Pin a specific version or commit hash to reduce supply-chain change risk from future updates.

Audited by: gpt-5.4 · 2026-06-16

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "io.github.CSOAI-ORG/video-editing-ai-mcp" MCP server from askskill:
Run: claude mcp add 'io-github-csoai-org-video-editing-ai-mcp' -- npx -y video-editing-ai-mcp