alibabacloud-video-editor

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes the official Alibaba Cloud SDK for Python to interact with cloud services. It follows standard security practices by using the default credential chain to resolve authentication from environment variables or the local configuration file at ~/.alibabacloud/credentials.ini. No sensitive data is hardcoded or exfiltrated to non-vendor domains.
  • [SAFE]: The execution script scripts/video_editor.py implements robust input validation, including region whitelisting, Job ID pattern matching, and JSON schema validation for the Timeline and Output configurations.
  • [SAFE]: The skill incorporates a safety mechanism via the confirm_high_risk_operation function, which requires explicit user confirmation before submitting cloud-based processing jobs, thereby preventing unauthorized resource consumption or unintended costs.
  • [SAFE]: All remote service endpoints and documentation references target official Alibaba Cloud domains (aliyun.com and aliyuncs.com). These are recognized as well-known and trusted infrastructure for the skill's intended purpose.
  • [SAFE]: The skill demonstrates high manifest consistency; the stated purpose of cloud-based video editing aligns perfectly with the code logic, tool requirements, and permission requests documented in references/ram-policies.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:09 AM