ra-video-download
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads media from user-provided URLs and communicates with the third-party
api.tikhub.devendpoint to retrieve video details and download links for Douyin content. - [COMMAND_EXECUTION]: The script executes local system binaries including
yt-dlp,ffmpeg, andffprobe. These calls are implemented usingsubprocess.runwith argument lists rather than shell strings, which effectively prevents shell injection vulnerabilities. - [SAFE]: The skill manages the
TIKHUB_API_KEYby reading it from environment variables or a local.envfile, adhering to standard secret management practices. No malicious behaviors, obfuscation, or unauthorized data exfiltration were detected.
Audit Metadata