webrtc-livekit
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/livekit.pyscript fetches officiallivekit-serverandlivekit-clibinaries directly from the LiveKit project's official GitHub release pages. - [COMMAND_EXECUTION]: The script uses the
subprocessmodule to execute the downloaded LiveKit binaries for server startup, room management, and load testing. The commands are executed as lists, which is a safe practice against shell injection. - [SAFE]: The skill implements standard JWT (HS256) token generation using Python's built-in
hmacandhashlibmodules, ensuring secure token minting without external library dependencies. - [SAFE]: Permissions for downloaded binaries are set to
755(executable) usingos.chmod, which is standard and necessary for the intended functionality of installing CLI tools.
Audit Metadata