video-transcript
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute standard media processing tools likeffmpeg,ffprobe,yt-dlp, andcurlfor downloading and compressing video files. - Evidence in
scripts/transcript.pyshows calls toffmpegfor video segmenting and compression, andyt-dlpfor downloading. - [EXTERNAL_DOWNLOADS]: The skill downloads content from well-known media platforms such as Bilibili, YouTube, and Douyin to perform transcription.
- The
scripts/platform_extractor.pyuses Playwright to extract direct video URLs, which are then fetched viacurl. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill manages a
DOUBAO_API_KEYvia a.envfile for secure secret handling. scripts/transcript.pyincludes a_load_dotenvfunction to read configuration from a local.envfile, which is a recommended security practice for API keys.
Audit Metadata