Communitygithub.com

valdiviasec/mosrai

Use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u

mosrai とは?

mosrai is a Claude Code agent skill that use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u.

対応~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/valdiviasec/mosrai/tree/main/skills/ffmpeg-hls-crossuser-fileread

お気に入りのAIに質問する

このエージェントスキルを事前に読み込んだ状態で新しいチャットを開きます。

ドキュメント

mosrai は何をしますか?

Use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u

関連スキル