anibon-timestamper

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to call system utilities such as yt-dlp for metadata and media retrieval, as well as python3 to run modular scripts within the skill's own directory.
  • [EXTERNAL_DOWNLOADS]: Fetches video metadata, transcripts, and storyboard assets from YouTube, which is an established and well-known service.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external data from YouTube transcripts and live chat logs. This data is untrusted and represents a potential attack surface where embedded instructions could attempt to influence sub-agent behavior.
  • [DYNAMIC_EXECUTION]: Utilizes dynamic module loading via importlib and importlib.util to load local cleaning utilities and access system error reporting.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 01:19 AM
Security Audit — agent-trust-hub — anibon-timestamper