video-rough-cut
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill heavily relies on the
subprocessmodule to executeffmpegandffprobefor media processing tasks, such as inscripts/cut_render.pyandscripts/selfcheck_frames.py. These calls use list-based arguments to prevent shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill uses the
yt-dlputility to download video content from remote URLs provided by the user, which is a core part of its intended functionality. - [COMMAND_EXECUTION]: The script
scripts/transcribe.pyusesimportlib.utilto dynamically load and execute a transcription module from a sibling directory. This pattern is used for code reuse across modular skills and points to a local, predictable path. - [COMMAND_EXECUTION]: Automated tests and protocol checks (
scripts/check_project_protocol.py,tests/test_inspect_bounds.py) usesubprocess.runto execute internal Python scripts for validation, following safe execution practices.
Audit Metadata