linkpix-video-subtitle-remove
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Node.js runtime from nodejs.org and the @iqinghu/qhkit package from the official npm registry. These are well-known services.
- [COMMAND_EXECUTION]: The skill operates by executing shell commands using the qhkit binary. It includes instructions for parameterizing inputs via files to avoid shell injection vulnerabilities.
- [PERSISTENCE]: The instructions suggest adding the installation directory to the shell's PATH in ~/.bashrc. This is a standard configuration step for local CLI tool installations.
- [SAFE]: Automated scanner flags regarding piped execution refer to a SHA256 checksum verification process (sha256sum -c -), which is an integrity check rather than a malicious code execution vector.
Audit Metadata