social-media-publishing
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
ffmpegviasubprocess.runto encode videos for native Reddit uploads. This is found inscripts/reddit/native_video.pyand is a legitimate part of the video processing workflow. - [COMMAND_EXECUTION]: The YouTube CLI uses
os.execveinscripts/youtube/cli.pyto re-execute the script using a specific Python virtual environment to ensure themodallibrary is available for uploads. - [EXTERNAL_DOWNLOADS]: Several platform scripts (LinkedIn, X, TikTok) support downloading media assets from user-supplied public HTTPS URLs. This functionality uses
urllib.request.urlopento fetch assets before uploading them to the respective platforms. - [SAFE]: The skill implements best practices for secret management by loading credentials from environment variables or dedicated configuration files in the user's home directory (e.g.,
~/.secrets/reddit/env). No hardcoded secrets or unsafe credential handling were detected.
Audit Metadata