editing-decision-engine
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external binaries such as
ffmpegfor video fixture generation andpython3 -m yt_dlpfor downloading media assets. It also uses theopencommand on macOS to launch files for user review. These operations utilize array-based argument passing (viaspawnandexecFileSync), which effectively prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill performs remote downloads using
yt-dlpto fetch video files and interacts with vendor-specific APIs for media generation and authentication refreshes. These network operations are directed at the vendor's infrastructure or whitelisted local addresses. - [CREDENTIALS_UNSAFE]: The skill manages authentication by reading and refreshing session tokens stored in local configuration files (
config.json) within platform-specific application data directories. These credentials facilitate secure communication with the vendor's cloud services.
Audit Metadata