Skills
Navigate
skills/tikhub/tikhub-plugin/social-media-downloader/Gen Agent Trust Hub

social-media-downloader

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Uses curl to interact with the TikHub API and download media files. It also utilizes python3 for secure URL encoding.
  • [EXTERNAL_DOWNLOADS]: Downloads media content from external sources as determined by the TikHub API response to fulfill user download requests.
  • [DATA_EXFILTRATION]: Forwards user-provided URLs to api.tikhub.io for processing. As this domain belongs to the skill author, this is standard vendor integration.
  • [PROMPT_INJECTION]: Analyzed for indirect prompt injection risks associated with processing external URLs.
  • Ingestion points: External social media URLs provided by the user (SKILL.md).
  • Boundary markers: None explicitly defined to separate untrusted URL data from instructions.
  • Capability inventory: curl (network access, file writing), python3 (inline script execution).
  • Sanitization: Implements urllib.parse.quote to sanitize URL inputs before they are used in API requests, mitigating potential command injection via URL parameters.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 08:10 AM