m3u8-media-downloader
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses established tools from the author's own repository to perform media downloads. No evidence of malicious intent, data exfiltration to unauthorized domains, or obfuscation was found.
- [EXTERNAL_DOWNLOADS]: Installs the
@lzwme/m3u8-dlpackage from the NPM registry. As this is a resource owned by the vendor 'lzwme', it is considered a legitimate dependency for the skill's functionality. - [COMMAND_EXECUTION]: Executes the
m3u8dlCLI tool and interacts withffmpegfor media processing and format conversion. These operations are consistent with the skill's stated purpose of downloading and merging video streams. - [DATA_EXFILTRATION]: While the skill makes network requests, they are directed to user-provided media URLs (e.g., 抖音, 微博) for the purpose of downloading content as requested by the user.
Audit Metadata