re-light

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automatically installs the fal-client and imageio-ffmpeg packages from the official Python Package Index (PyPI) during its setup process if they are missing from the environment.
  • [COMMAND_EXECUTION]: The script executes ffmpeg and ffprobe locally via subprocess to perform video metadata analysis, frame extraction, and video conforming tasks. These calls use argument lists for improved security.
  • [DATA_EXFILTRATION]: The skill reads sensitive shell configuration files (such as ~/.zshrc, ~/.bashrc, and ~/.profile) and a specific local configuration file (~/.genmedia/config.json) to find the FAL_KEY required for authentication with the Fal.ai service. This behavior is documented and scoped to recovering the specific credential needed for the skill to function.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 06:46 AM
Security Audit — agent-trust-hub — re-light