video-ingest

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses launchctl to manage the com.joel.system-bus-worker service and various docker commands to monitor the status and logs of Inngest containers. These are intended for local service orchestration.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with local endpoints at localhost:8288 and localhost:3111 for health checks and event dispatching. These network operations are confined to the local environment.
  • [REMOTE_CODE_EXECUTION]: Automated scans flagged a curl | python3 pattern. Technical review confirms this is a false positive. The skill uses python3 -c with a static script provided in the markdown to parse JSON data returned from a local health check; it does not execute remote code fetched from the URL.
  • [DATA_EXFILTRATION]: The skill reads and writes to the user's Obsidian Vault (~/Vault/) and system logs (~/.local/log/). This access is necessary for the primary function of generating video notes and monitoring the local ingest pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 01:59 AM