voice-batch-runner
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
_postplus_shared/00-core/shared-runtime/scripts/download_videos_from_manifest_with_ytdlp.mjsutilizesnode:child_process.spawnto executepython3 -m yt_dlpfor downloading video assets. This is a standard and controlled execution of a well-known media processing utility. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to download generated audio assets from PostPlus Cloud endpoints and fetches video content from external source URLs provided in processing manifests.
- [CREDENTIALS_UNSAFE]: The skill manages session tokens stored within its own local configuration directory (e.g.,
~/.config/postplus/config.json) to authenticate requests to the vendor's cloud APIs. This is expected behavior for an integrated vendor tool.
Audit Metadata