media-downloader
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
yt-dlpcommand-line tool to perform its primary function. The Python scriptscripts/download.pyfollows security best practices by passing arguments as a list tosubprocess.run(), which effectively prevents shell injection attacks even when processing user-provided URLs. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading content from well-known media platforms (such as YouTube, TikTok, and Bilibili) as requested by the user. These operations are within the stated scope of the skill and target legitimate services.
- [CREDENTIALS_UNSAFE]: While the documentation mentions authentication options like browser cookies and user credentials to access restricted content, no sensitive information or hardcoded secrets are included in the skill's code or instructions.
Audit Metadata