video-to-text
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/douyin_extract.pyusessubprocess.runto invokecurlfor fetching video metadata via Server-Side Rendering (SSR) pages. This is a common pattern for scraping metadata from dynamic websites like Douyin without requiring browser automation. - [COMMAND_EXECUTION]: The script
scripts/vtt.pyexecutes system utilitiesavconvert(on macOS) orffmpeg(on Linux) to extract audio from video files before transcription. These are standard media processing tools. - [EXTERNAL_DOWNLOADS]: The skill uses
pipto installfaster-whisper, a well-known machine learning library for speech-to-text. It also downloads the 'tiny' Whisper model (~75MB) from official sources upon first use, which is documented and expected behavior for this type of application. - [DATA_EXPOSURE]: The script
scripts/douyin_extract.pyreads a user-provided environment variableDOUYIN_COOKIEto facilitate authenticated API requests if the SSR method fails. This follows best practices for secret management by not hardcoding credentials.
Audit Metadata