webrtc-livekit

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/livekit.py script fetches official livekit-server and livekit-cli binaries directly from the LiveKit project's official GitHub release pages.
  • [COMMAND_EXECUTION]: The script uses the subprocess module to execute the downloaded LiveKit binaries for server startup, room management, and load testing. The commands are executed as lists, which is a safe practice against shell injection.
  • [SAFE]: The skill implements standard JWT (HS256) token generation using Python's built-in hmac and hashlib modules, ensuring secure token minting without external library dependencies.
  • [SAFE]: Permissions for downloaded binaries are set to 755 (executable) using os.chmod, which is standard and necessary for the intended functionality of installing CLI tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:53 AM
Security Audit — agent-trust-hub — webrtc-livekit