pixabay-footage

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads images and videos from Pixabay's official content delivery network. As Pixabay is a well-known service for copyright-free assets, these downloads are considered safe and intended behavior for this skill's primary purpose.
  • [COMMAND_EXECUTION]: The shell wrapper (pixabay-footage.sh) uses exec to forward arguments to a local Python script. The arguments are handled via Python's standard argparse library, providing proper separation between command strings and data.
  • [CREDENTIALS_UNSAFE]: The skill correctly manages sensitive data by requiring the PIXABAY_API_KEY to be provided as an environment variable, which is a secure and standard practice for API-based tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 12:49 PM
Security Audit — agent-trust-hub — pixabay-footage