ghostcut-api-guide
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides Python scripts and instructions to interact with the GhostCut API at
api.zhaoli.com. It also facilitates uploading media assets to Alibaba Cloud (Aliyun) OSS buckets for processing. These network operations are strictly limited to the vendor's infrastructure for the stated purpose of media manipulation. - [COMMAND_EXECUTION]: The skill contains Python scripts (
scripts/ghostcut_api.pyandscripts/sync_api_guide.py) designed to be executed by the agent or user. These scripts automate API authentication, file management, and documentation synchronization tasks. - [SAFE]: No malicious patterns were identified. The skill employs standard security practices, such as environment variable usage for API keys and secrets, preventing hardcoded credential exposure. No evidence of prompt injection, data exfiltration to unauthorized parties, or code obfuscation was found.
Audit Metadata