video-use

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of system utilities including ffmpeg and ffprobe for video processing, and say (on macOS) for local text-to-speech. These are executed using subprocess.run with argument lists, which effectively mitigates shell injection risks.
  • [EXTERNAL_DOWNLOADS]: The setup.sh script automates the creation of a Python virtual environment and installs necessary dependencies (playwright, pillow, requests) via pip or uv. It also manages the installation of the Chrome browser via Playwright.
  • [SAFE]: API keys and web credentials are handled via environment variables or a specific local configuration file (~/.pikiloom/skills.env), which is consistent with its documented setup and intended functionality for automated recording and narration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 07:58 AM
Security Audit — agent-trust-hub — video-use