caption-burn
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches fonts (Roboto-Bold and Merriweather-Bold) from Google's official GitHub repository when they are not found on the local system.
- [COMMAND_EXECUTION]: Utilizes
ffmpegandffprobevia subprocess calls for media analysis and video rendering (burning captions). All calls use list-style arguments and do not invoke a shell. - [DATA_EXFILTRATION]: Uploads audio files to FAL (a third-party provider) for transcription. This is performed through a documented proxy (
media_proxy.py) and is the primary intended function of the transcription script. - [CREDENTIALS_SAFE]: Safely manages API credentials and tokens for media services by reading from standardized configuration paths (
~/.gooseworks/credentials.json) or environment variables, following best practices for secret management.
Audit Metadata