edits-hook-overlay

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of subprocess.run to call external binaries including ffmpeg, ffprobe, and pymobiledevice3. These tools are used for video processing and for interacting with a connected iPhone's file system (specifically the /DCIM folder) to pull exported video files. All command invocations use list-based arguments rather than shell strings, preventing typical command injection issues.
  • [DYNAMIC_EXECUTION]: The script apply_overlay.py programmatically invokes make_hlg_lut.py using sys.executable to generate a 3D LUT file at runtime. This is a legitimate use for generating large data files that are not suitable for inclusion in the skill's source distribution.
  • [SAFE]: The interaction with WebDriverAgent (WDA) via urllib.request is restricted to local network communication (defaulting to localhost:8100) and is used solely for the stated purpose of automating the Instagram Edits app. No external data exfiltration or suspicious network patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 11:33 PM