verysmallwoods-video

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/srt_helper.py script invokes the ffmpeg command-line utility via subprocess.run to perform audio splicing and silent segment insertion. This is a legitimate functional requirement for synchronizing audio with subtitles.\n- [EXTERNAL_DOWNLOADS]: The scripts/listenhub-tts.sh script downloads generated audio (MP3) and subtitle files from the ListenHub API (api.marswave.ai). It also interacts with Groq and OpenAI APIs for ASR fallback. These network operations are strictly aligned with the skill's documented purpose of media generation.\n- [CREDENTIALS_SAFE]: The skill requires multiple API keys (LISTENHUB_API_KEY, GROQ_API_KEY, OPENAI_API_KEY). The implementation correctly expects these to be provided via environment variables, avoiding hardcoded secrets and following secure configuration practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 05:30 PM
Security Audit — agent-trust-hub — verysmallwoods-video