edits-hook-overlay
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
subprocess.runto call external binaries includingffmpeg,ffprobe, andpymobiledevice3. These tools are used for video processing and for interacting with a connected iPhone's file system (specifically the/DCIMfolder) to pull exported video files. All command invocations use list-based arguments rather than shell strings, preventing typical command injection issues. - [DYNAMIC_EXECUTION]: The script
apply_overlay.pyprogrammatically invokesmake_hlg_lut.pyusingsys.executableto generate a 3D LUT file at runtime. This is a legitimate use for generating large data files that are not suitable for inclusion in the skill's source distribution. - [SAFE]: The interaction with WebDriverAgent (WDA) via
urllib.requestis restricted to local network communication (defaulting tolocalhost:8100) and is used solely for the stated purpose of automating the Instagram Edits app. No external data exfiltration or suspicious network patterns were detected.
Audit Metadata