verysmallwoods-video
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/srt_helper.pyscript invokes theffmpegcommand-line utility viasubprocess.runto perform audio splicing and silent segment insertion. This is a legitimate functional requirement for synchronizing audio with subtitles.\n- [EXTERNAL_DOWNLOADS]: Thescripts/listenhub-tts.shscript downloads generated audio (MP3) and subtitle files from the ListenHub API (api.marswave.ai). It also interacts with Groq and OpenAI APIs for ASR fallback. These network operations are strictly aligned with the skill's documented purpose of media generation.\n- [CREDENTIALS_SAFE]: The skill requires multiple API keys (LISTENHUB_API_KEY,GROQ_API_KEY,OPENAI_API_KEY). The implementation correctly expects these to be provided via environment variables, avoiding hardcoded secrets and following secure configuration practices.
Audit Metadata