video-use
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of system utilities including
ffmpegandffprobefor video processing, andsay(on macOS) for local text-to-speech. These are executed usingsubprocess.runwith argument lists, which effectively mitigates shell injection risks. - [EXTERNAL_DOWNLOADS]: The
setup.shscript automates the creation of a Python virtual environment and installs necessary dependencies (playwright,pillow,requests) viapiporuv. It also manages the installation of the Chrome browser via Playwright. - [SAFE]: API keys and web credentials are handled via environment variables or a specific local configuration file (
~/.pikiloom/skills.env), which is consistent with its documented setup and intended functionality for automated recording and narration.
Audit Metadata