alibabacloud-video-editor
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Alibaba Cloud Python SDK and related dependencies as specified in
requirements.txtto interact with cloud services.\n- [CREDENTIALS_UNSAFE]: The execution script accesses local Alibaba Cloud credentials (e.g.,~/.alibabacloud/credentials.ini, environment variables) to authenticate with the ICE and OSS services. This is the standard and recommended method for official vendor tools to manage cloud access.\n- [COMMAND_EXECUTION]: The workflow involves executing a local Python scriptscripts/video_editor.pyto submit editing tasks. The script includes robust input validation and does not use dangerous execution patterns likeeval()orsubprocesson untrusted strings.\n- [DATA_EXFILTRATION]: While the skill performs network operations to Alibaba Cloud APIs (aliyuncs.com), these are required for its primary function of video editing and are restricted to official vendor domains.\n- [SAFE]: The skill implements aconfirm_high_risk_operationfunction that warns users about potential costs and file overwrites before submitting jobs, demonstrating a proactive approach to user safety and operational security.
Audit Metadata