otio-docs

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches documentation from official OpenTimelineIO repositories and documentation sites, including opentimelineio.readthedocs.io and raw.githubusercontent.com (AcademySoftwareFoundation). These are trusted and well-known sources for this project.\n- [PROMPT_INJECTION]: The skill ingests data from external documentation sources.\n
  • Ingestion points: scripts/otiodocs.py fetches HTML and Markdown content from the internet.\n
  • Boundary markers: No specific delimiters are used to wrap the fetched documentation content when displayed to the agent.\n
  • Capability inventory: scripts/otiodocs.py has the capability to perform network GET requests and write to the local cache directory (~/.cache/otio-docs).\n
  • Sanitization: The script includes a custom HTML parser (TextExtractor) that extracts plain text from HTML content, ensuring that tags like <script> or <style> are ignored.\n- [COMMAND_EXECUTION]: The skill executes a local Python script scripts/otiodocs.py using uv run. This script is used for specific documentation tasks such as indexing, searching, and fetching text.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:54 AM
Security Audit — agent-trust-hub — otio-docs