m3u8-media-downloader

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses established tools from the author's own repository to perform media downloads. No evidence of malicious intent, data exfiltration to unauthorized domains, or obfuscation was found.
  • [EXTERNAL_DOWNLOADS]: Installs the @lzwme/m3u8-dl package from the NPM registry. As this is a resource owned by the vendor 'lzwme', it is considered a legitimate dependency for the skill's functionality.
  • [COMMAND_EXECUTION]: Executes the m3u8dl CLI tool and interacts with ffmpeg for media processing and format conversion. These operations are consistent with the skill's stated purpose of downloading and merging video streams.
  • [DATA_EXFILTRATION]: While the skill makes network requests, they are directed to user-provided media URLs (e.g., 抖音, 微博) for the purpose of downloading content as requested by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 12:50 PM
Security Audit — agent-trust-hub — m3u8-media-downloader