video-download
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides multiple shell command templates for interacting with the
yt-dlpCLI. These commands are used to download video/audio and query metadata. The templates correctly encapsulate the user-provided URL in double quotes (e.g.,yt-dlp "URL"), which is a standard precaution against shell injection. - [EXTERNAL_DOWNLOADS]: The skill recommends installing
yt-dlpandffmpegthrough official system package managers like Homebrew (brew), APT (apt), or the Python Package Index (pip). These are reputable tools required for the skill's primary media-processing functionality. - [SAFE]: No obfuscation, data exfiltration patterns, credential harvesting, or prompt injection attempts were identified. The skill's behavior matches its described purpose of media management.
Audit Metadata