video-watch
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The scripts
scripts/video_watch.pyandscripts/preflight.pyutilizesubprocess.runto execute external binaries includingffmpeg,ffprobe, andyt-dlp. These executions are essential for the skill's primary functionality of video metadata extraction and frame sampling. The commands are constructed using argument lists, which mitigates the risk of shell injection.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of video content and transcripts from remote URLs usingyt-dlp. The implementation includes a dedicated functionwarn_sensitive_urlthat inspects URL query strings for common credential keys (e.g., tokens, signatures) and issues a warning if found, demonstrating proactive security design.
Audit Metadata