viral-clip-editor

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes yt-dlp to fetch video content from external URLs provided by the user. This is a core feature of the tool and is performed via standard command-line interfaces. \n- [COMMAND_EXECUTION]: The provided scripts make extensive use of subprocess.run to interact with system utilities such as ffmpeg, ffprobe, and yt-dlp. These calls generally use argument lists to mitigate common shell injection risks. \n- [REMOTE_CODE_EXECUTION]: The skill includes logic to automatically install missing Python dependencies (faster-whisper, opencv-python-headless, yt-dlp) using pip at runtime. While this involves downloading and executing external code, the packages are well-known and necessary for the skill's operation. \n- [COMMAND_EXECUTION]: The scripts/pipeline.py and scripts/transcribe.py files perform checks for dependencies and system fonts using shell commands like fc-list and package import tests.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 09:30 PM
Security Audit — agent-trust-hub — viral-clip-editor