videodb
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the VideoDB SDK to interact with its official API. All network communications are directed towards the service's legitimate infrastructure.\n- [SAFE]: The ws_listener.py script manages session state and WebSocket identifiers in a dedicated local directory (~/.local/state/videodb). It proactively secures this directory by applying restrictive filesystem permissions (0o700), ensuring that session data remains private to the user.\n- [SAFE]: The documentation provides clear guidance on secret management, advising users to provide the VIDEO_DB_API_KEY via environment variables or .env files and specifically warning against allowing the agent to handle the key directly.\n- [SAFE]: External dependencies are restricted to well-known packages (videodb, python-dotenv) installed via standard package managers.\n- [SAFE]: The skill processes external media and URLs as part of its core functionality. While this represents a standard data ingestion surface, the implementation relies on server-side processing by the vendor's API, which incorporates its own security controls.
Audit Metadata