video-download
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The function
ensure_yt_dlpinscripts/download.pyexecutes apip installcommand to fetch theyt-dlppackage from PyPI if it is missing.- [COMMAND_EXECUTION]: The scriptscripts/download.pyusessubprocess.runto invoke theyt-dlpCLI. User-provided URLs are passed as arguments within a list structure to prevent shell injection.- [CREDENTIALS_UNSAFE]:scripts/download.pycontains logic infind_cookies_fileandbrowser_availableto scan local filesystem paths, including~/Downloadsand browser profile directories, for cookie databases and Netscape-formatted cookie files to use for authentication.
Audit Metadata