byted-mediakit-video
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the
shellpermission to execute themediakit-clitool. This is consistent with its stated purpose of providing a command-line interface for video processing services. - [EXTERNAL_DOWNLOADS]: The documentation in
reference/shared.mdinstructs users to install the@volcengine/mediakit-clipackage from the official npm registry. This is a standard installation procedure for a vendor-provided tool and does not present a security risk. - [CREDENTIALS_UNSAFE]: The skill describes the use of
MEDIAKIT_API_KEYfor authentication. It correctly advises users to manage these credentials via environment variables or a local configuration file (~/.mediakit/config.json) rather than hardcoding them in the skill itself. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms was found in the analyzed files. The instructions are clear, professional, and limited to the scope of video processing.
Audit Metadata