dlstreamer-coding-agent

SUSPICIOUS: the skill's core purpose is coherent and its external dependencies are mostly official, but it contains a meaningful internal inconsistency around user approval. The main risk is not credential theft or malware; it is autonomous execution of installs/downloads and container runs after mixed guidance that can bypass expected confirmation. Supply-chain risk is moderate due to curl|sh, latest tags, and multiple external downloads, but provenance is largely legitimate.

No clear malware, persistence, credential theft, reverse shell, cryptomining, or network exfiltration behavior is present. The main security issue is unsafe construction of a GStreamer pipeline from unescaped command-line values, especially input URIs, output paths, and device values. This can cause denial of service or potentially pipeline-element injection when arguments are attacker-controlled. RTSP credentials may also be exposed in console output. Use GStreamer API element properties or rigorously escape and allowlist all dynamic values.