download-video
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads content from several 'drummerduck.com' subdomains (e.g.,
download-twitter-video.drummerduck.com,download-tktk-video.drummerduck.com) to extract video metadata and download media files. These are vendor-owned resources directly related to the skill's core functionality. - [COMMAND_EXECUTION]: The README provides a one-line installation command that pipes a remote script to bash (
curl ... | bash). This is a common but high-privilege installation pattern. The script source (raw.githubusercontent.com/drmrduck/skills/main/install.sh) matches the skill author's repository. - [COMMAND_EXECUTION]: The
scripts/dl.shscript executes shell commands to perform network requests viacurland process data usingjqorpython3if available. The script safely handles user inputs using standard shell quoting and URL-encoding logic.
Audit Metadata