youtube-video
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes a network request to 'https://ai-factory.frevana.com' to fetch video metadata. This is the primary intended function of the skill and targets the vendor's own infrastructure.
- [COMMAND_EXECUTION]: The script uses standard system utilities including 'curl' for network requests and 'python3' for JSON validation and processing. These operations are scoped to the skill's documented purpose.
- [CREDENTIALS_UNSAFE]: The skill manages a 'FREVANA_TOKEN' via environment variables or a CLI flag. It correctly follows security best practices by not hardcoding credentials and using secure input methods (read -s) for interactive sessions.
Audit Metadata