video-setup

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill recommends installing the uv package manager using a common pattern of piping a remote script to a shell: curl -LsSf https://astral.sh/uv/install.sh | sh. This appears in the documentation and as a printed recommendation in the diagnostic script. The source, astral.sh, is the official domain for a well-known developer toolchain provider.
  • [EXTERNAL_DOWNLOADS]: The skill refers to external binaries and scripts, including the uv installer from astral.sh and package installations via npm and brew. These references are consistent with the skill's stated purpose of environment preparation.
  • [COMMAND_EXECUTION]: The diagnostic script (scripts/doctor.sh) executes local system commands such as node, ffmpeg, python3, and ls to check for specific versions and feature availability (e.g., checking for the tmix filter in FFmpeg).
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 05:58 PM