cli-hub-matrix-video-creation
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of system binaries for media processing (e.g., ffmpeg, sox, convert) and specialized CLI tools (e.g., yt-dlp, spotdl, BBDown). These operations are essential to the primary function of video creation and assembly.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of third-party Python packages and external agent skills from GitHub and NPM registries (e.g., Remotion, HyperFrames) to extend its production capabilities. These references are transparently documented as dependencies.
- [SAFE]: Subprocess calls in 'scripts/video_doctor.py' are used appropriately to interface with media analysis tools. The script uses list-based arguments for subprocess.run(), which is a best practice that prevents shell injection.
- [SAFE]: Preflight checks for environment variables (e.g., OPENAI_API_KEY, RUNWAY_API_KEY) are implemented correctly to verify the presence of credentials without exposing or exfiltrating their values.
Audit Metadata