re-light
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically installs the
fal-clientandimageio-ffmpegpackages from the official Python Package Index (PyPI) during its setup process if they are missing from the environment. - [COMMAND_EXECUTION]: The script executes
ffmpegandffprobelocally via subprocess to perform video metadata analysis, frame extraction, and video conforming tasks. These calls use argument lists for improved security. - [DATA_EXFILTRATION]: The skill reads sensitive shell configuration files (such as
~/.zshrc,~/.bashrc, and~/.profile) and a specific local configuration file (~/.genmedia/config.json) to find theFAL_KEYrequired for authentication with the Fal.ai service. This behavior is documented and scoped to recovering the specific credential needed for the skill to function.
Audit Metadata