viral-clip-editor
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
yt-dlpto fetch video content from external URLs provided by the user. This is a core feature of the tool and is performed via standard command-line interfaces. \n- [COMMAND_EXECUTION]: The provided scripts make extensive use ofsubprocess.runto interact with system utilities such asffmpeg,ffprobe, andyt-dlp. These calls generally use argument lists to mitigate common shell injection risks. \n- [REMOTE_CODE_EXECUTION]: The skill includes logic to automatically install missing Python dependencies (faster-whisper,opencv-python-headless,yt-dlp) usingpipat runtime. While this involves downloading and executing external code, the packages are well-known and necessary for the skill's operation. \n- [COMMAND_EXECUTION]: Thescripts/pipeline.pyandscripts/transcribe.pyfiles perform checks for dependencies and system fonts using shell commands likefc-listand package import tests.
Audit Metadata