video-download

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The function ensure_yt_dlp in scripts/download.py executes a pip install command to fetch the yt-dlp package from PyPI if it is missing.- [COMMAND_EXECUTION]: The script scripts/download.py uses subprocess.run to invoke the yt-dlp CLI. User-provided URLs are passed as arguments within a list structure to prevent shell injection.- [CREDENTIALS_UNSAFE]: scripts/download.py contains logic in find_cookies_file and browser_available to scan local filesystem paths, including ~/Downloads and browser profile directories, for cookie databases and Netscape-formatted cookie files to use for authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 09:27 AM
Security Audit — agent-trust-hub — video-download