skills/affaan-m/ecc/videodb/Gen Agent Trust Hub

videodb

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses the official videodb Python SDK to interact with VideoDB's cloud infrastructure for video processing and media generation. All sensitive operations, such as video transcoding, reframing, and AI analysis, are performed server-side on VideoDB infrastructure.
  • [SAFE]: The skill uses python-dotenv for local environment variable management, specifically instructing the user to set their VIDEO_DB_API_KEY in a .env file or shell environment. This is a standard and safe practice for credential management in development tools.
  • [SAFE]: The provided scripts/ws_listener.py script is a utility for receiving real-time WebSocket events (like transcripts and visual alerts). It uses standard Python asyncio and websockets patterns. It writes temporary state data (WebSocket IDs and PIDs) to a user-local state directory (~/.local/state/videodb by default) with restricted permissions (0700), which is a best practice for local state storage.
  • [SAFE]: The skill does not perform any unauthorized file access, network exfiltration, or persistence. All network operations are directed towards official VideoDB endpoints (e.g., console.videodb.io, stream.videodb.io) or user-provided media URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 10:23 PM
Security Audit — agent-trust-hub — videodb