watch
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes system binaries including ffmpeg, ffprobe, and yt-dlp via subprocess calls to process video data. These calls are implemented using defensive programming techniques, such as the use of '--' delimiters to prevent argument injection from user-provided URLs.- [EXTERNAL_DOWNLOADS]: The skill fetches video files and metadata from external sources using yt-dlp. It also includes functionality to install required system dependencies using Homebrew on macOS, providing clear instructions for other platforms.- [DATA_EXFILTRATION]: Audio data extracted from videos is transmitted to Groq and OpenAI Whisper APIs for transcription. This external communication is a documented functional requirement and targets established technology providers.
Audit Metadata