skills/drmrduck/skills/download-video/Gen Agent Trust Hub

download-video

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads content from several 'drummerduck.com' subdomains (e.g., download-twitter-video.drummerduck.com, download-tktk-video.drummerduck.com) to extract video metadata and download media files. These are vendor-owned resources directly related to the skill's core functionality.
  • [COMMAND_EXECUTION]: The README provides a one-line installation command that pipes a remote script to bash (curl ... | bash). This is a common but high-privilege installation pattern. The script source (raw.githubusercontent.com/drmrduck/skills/main/install.sh) matches the skill author's repository.
  • [COMMAND_EXECUTION]: The scripts/dl.sh script executes shell commands to perform network requests via curl and process data using jq or python3 if available. The script safely handles user inputs using standard shell quoting and URL-encoding logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 04:35 AM
Security Audit — agent-trust-hub — download-video