alibabacloud-video-editor

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Alibaba Cloud Python SDK and related dependencies as specified in requirements.txt to interact with cloud services.\n- [CREDENTIALS_UNSAFE]: The execution script accesses local Alibaba Cloud credentials (e.g., ~/.alibabacloud/credentials.ini, environment variables) to authenticate with the ICE and OSS services. This is the standard and recommended method for official vendor tools to manage cloud access.\n- [COMMAND_EXECUTION]: The workflow involves executing a local Python script scripts/video_editor.py to submit editing tasks. The script includes robust input validation and does not use dangerous execution patterns like eval() or subprocess on untrusted strings.\n- [DATA_EXFILTRATION]: While the skill performs network operations to Alibaba Cloud APIs (aliyuncs.com), these are required for its primary function of video editing and are restricted to official vendor domains.\n- [SAFE]: The skill implements a confirm_high_risk_operation function that warns users about potential costs and file overwrites before submitting jobs, demonstrating a proactive approach to user safety and operational security.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 01:59 AM