build-video-editor

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill guides the agent to execute shell commands necessary for mobile development, such as pod install, npm install, flutter pub get, and gem install xcodeproj. These commands are standard for installing dependencies and configuring project files in mobile development environments.\n- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from banuba.com and clones integration samples from the official Banuba GitHub repository (github.com/Banuba). These downloads are sourced directly from the SDK vendor's infrastructure to ensure accuracy and safety.\n- [PROMPT_INJECTION]: The skill includes a workflow for inspecting local project configuration files (e.g., AndroidManifest.xml, Podfile) to determine the target platform. While this exposes a surface for processing untrusted data, the logic is strictly scoped to platform identification.\n
  • Ingestion points: Local project files inspected during platform detection (Workflow Step 1).\n
  • Boundary markers: None explicitly defined.\n
  • Capability inventory: Shell command execution, file system writes, and git cloning.\n
  • Sanitization: Not applicable to the analyzed metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 07:07 AM
Security Audit — agent-trust-hub — build-video-editor