qinghu-viral-video-kids
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Node.js binaries and checksum files from nodejs.org, which is a well-known and trusted service.
- [COMMAND_EXECUTION]: Provides instructions to install and use the '@iqinghu/qhkit' tool for video processing tasks.
- [REMOTE_CODE_EXECUTION]: Uses curl to retrieve checksums from nodejs.org to verify the integrity of the Node.js binary before extraction. This is a security-positive pattern that prevents execution of corrupted or malicious binaries.
- [PRIVILEGE_ESCALATION]: Software installation is directed to the user's local directory, avoiding unnecessary root or administrative privileges.
Audit Metadata