media-proxy

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [CREDENTIALS_UNSAFE]: Accesses the local configuration file at ~/.gooseworks/credentials.json to retrieve API tokens and agent identification for authenticating proxy requests.
  • [DATA_EXFILTRATION]: Transmits API tokens and session metadata to the configured api_base service to authorize media generation calls and logs diagnostic information to a central monitoring endpoint.
  • [EXTERNAL_DOWNLOADS]: Uses urllib.request.urlretrieve and requests.get to fetch media assets and generation results from remote FAL and ElevenLabs content delivery networks.
  • [COMMAND_EXECUTION]: Provides functionality to write generated media files and audio results directly to the local file system at paths specified by the agent or CLI arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 02:58 PM
Security Audit — agent-trust-hub — media-proxy