video-download

Pass

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides multiple shell command templates for interacting with the yt-dlp CLI. These commands are used to download video/audio and query metadata. The templates correctly encapsulate the user-provided URL in double quotes (e.g., yt-dlp "URL"), which is a standard precaution against shell injection.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing yt-dlp and ffmpeg through official system package managers like Homebrew (brew), APT (apt), or the Python Package Index (pip). These are reputable tools required for the skill's primary media-processing functionality.
  • [SAFE]: No obfuscation, data exfiltration patterns, credential harvesting, or prompt injection attempts were identified. The skill's behavior matches its described purpose of media management.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 4, 2026, 11:00 PM