video-transcript

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to execute standard media processing tools like ffmpeg, ffprobe, yt-dlp, and curl for downloading and compressing video files.
  • Evidence in scripts/transcript.py shows calls to ffmpeg for video segmenting and compression, and yt-dlp for downloading.
  • [EXTERNAL_DOWNLOADS]: The skill downloads content from well-known media platforms such as Bilibili, YouTube, and Douyin to perform transcription.
  • The scripts/platform_extractor.py uses Playwright to extract direct video URLs, which are then fetched via curl.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill manages a DOUBAO_API_KEY via a .env file for secure secret handling.
  • scripts/transcript.py includes a _load_dotenv function to read configuration from a local .env file, which is a recommended security practice for API keys.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 02:52 PM
Security Audit — agent-trust-hub — video-transcript