anibon-timestamper
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto call system utilities such asyt-dlpfor metadata and media retrieval, as well aspython3to run modular scripts within the skill's own directory. - [EXTERNAL_DOWNLOADS]: Fetches video metadata, transcripts, and storyboard assets from YouTube, which is an established and well-known service.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external data from YouTube transcripts and live chat logs. This data is untrusted and represents a potential attack surface where embedded instructions could attempt to influence sub-agent behavior.
- [DYNAMIC_EXECUTION]: Utilizes dynamic module loading via
importlibandimportlib.utilto load local cleaning utilities and access system error reporting.
Audit Metadata