linkpix-viral-video-toolkit

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches Node.js binaries and verification checksums from official Node.js distribution servers (nodejs.org) or a well-known mirror (npmmirror.com). It also installs the @iqinghu/qhkit package from the official npm registry. These are trusted and established sources for software development.
  • [COMMAND_EXECUTION]: Performs shell commands to configure the environment and run video analysis tasks. The setup instructions include a security best practice: verifying the SHA256 checksum of downloaded binaries before they are extracted and used to ensure the integrity of the software.
  • [PERSISTENCE]: Provides instructions to update the shell configuration (~/.bashrc) to ensure the Node.js path is persisted across sessions. This is standard configuration for user-space environment setup and does not pose a malicious persistence risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 04:09 PM