linkpix-viral-video-toolkit
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Node.js binaries and verification checksums from official Node.js distribution servers (
nodejs.org) or a well-known mirror (npmmirror.com). It also installs the@iqinghu/qhkitpackage from the official npm registry. These are trusted and established sources for software development. - [COMMAND_EXECUTION]: Performs shell commands to configure the environment and run video analysis tasks. The setup instructions include a security best practice: verifying the SHA256 checksum of downloaded binaries before they are extracted and used to ensure the integrity of the software.
- [PERSISTENCE]: Provides instructions to update the shell configuration (
~/.bashrc) to ensure the Node.js path is persisted across sessions. This is standard configuration for user-space environment setup and does not pose a malicious persistence risk.
Audit Metadata