ra-video-download

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads media from user-provided URLs and communicates with the third-party api.tikhub.dev endpoint to retrieve video details and download links for Douyin content.
  • [COMMAND_EXECUTION]: The script executes local system binaries including yt-dlp, ffmpeg, and ffprobe. These calls are implemented using subprocess.run with argument lists rather than shell strings, which effectively prevents shell injection vulnerabilities.
  • [SAFE]: The skill manages the TIKHUB_API_KEY by reading it from environment variables or a local .env file, adhering to standard secret management practices. No malicious behaviors, obfuscation, or unauthorized data exfiltration were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 08:46 AM
Security Audit — agent-trust-hub — ra-video-download