linkpix-douyin-viral-video
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads Node.js binaries from official project servers (nodejs.org) to ensure the required runtime environment is available. The process includes security verification of the downloaded archive using official SHA256 checksums, which is an industry best practice for manual installation.
- [PERSISTENCE]: Suggests configuring the shell environment by adding the tool path to the user's profile (~/.bashrc), ensuring the CLI remains accessible across sessions. This is a standard environmental configuration for tools installed in user-local directories.
- [DYNAMIC_EXECUTION]: Employs a local Python snippet for image processing (resizing) using the Pillow library to handle images exceeding platform size limits. This script runs locally on user-provided images and does not involve untrusted network data.
- [INDIRECT_PROMPT_INJECTION]: Ingests user-provided text prompts for video generation. The skill mitigates potential injection risks by using structured JSON for the underlying CLI calls rather than raw string concatenation in shell environments.
Audit Metadata