opusclip
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script (
scripts/opusclip) to wrap API calls. It relies on standard system utilities likecurlfor network requests,jqfor JSON processing, andffmpegfor local media tasks such as generating storyboards or trimming clips. - [EXTERNAL_DOWNLOADS]: Media processing commands like
storyboardandtrimdownload temporary preview videos from the OpusClip API or associated Google Cloud Storage links to the local/tmpdirectory for processing. - [DATA_EXFILTRATION]: The skill transmits video URLs or local video files to the official OpusClip API (
api.opus.pro) for processing. This is the primary intended function of the tool and uses the vendor's official infrastructure. - [PROMPT_INJECTION]: The skill processes external data such as video URLs and user-provided prompts for AI clipping. The bash script uses
jqto build JSON payloads, which ensures proper escaping of user-provided strings before they are sent to the API endpoints.
Audit Metadata