media-download
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/video.shscript is configured to download theyt-dlpexecutable from its official releases page on GitHub (https://github.com/yt-dlp/yt-dlp) if the tool is not found in the system's PATH. This is a standard convenience feature for standalone tool usage.\n- [REMOTE_CODE_EXECUTION]: The skill downloads a binary and executes it after granting execution permissions withchmod +x. Because the source is the official repository of a reputable and well-known tool, this behavior follows established software distribution patterns.\n- [COMMAND_EXECUTION]: The skill wraps several command-line utilities, includingyt-dlp,gallery-dl,ffprobe, andcurl, within Bash scripts to perform its primary functions of media downloading and metadata inspection.\n- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: The skill takes URLs and search queries directly from user input as arguments to its scripts.\n
- Boundary markers: The shell scripts employ the
--argument separator to prevent user-supplied strings from being misinterpreted as command flags by the underlying tools.\n - Capability inventory: The skill possesses the ability to perform network downloads and write files to the local file system (defaulting to the
./downloadsdirectory).\n - Sanitization: Search queries used in
scripts/pinterest.share passed through URL encoding using eitherjqor Python'surllib.parseto ensure the final request URL remains structurally sound.
Audit Metadata