generate-youtube-thumbnail
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the Arcads external API (external-api.arcads.ai) to request presigned upload URLs and download generated thumbnail images.
- [COMMAND_EXECUTION]: The workflow relies on a bash script (scripts/generate-batch.sh) which executes several system commands including curl for API communication and python3 for image manipulation.
- [DATA_EXFILTRATION]: Local image files and user-provided prompts are transmitted to the external-api.arcads.ai endpoint. This behavior is the intended primary purpose of the skill for generating content via a third-party service.
Audit Metadata