transform-encode-hls-video-with-transloadit
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- EXTERNAL_DOWNLOADS (MEDIUM): The skill uses
npx -y @transloadit/nodeto download and run code from the npm registry at runtime. Since the@transloaditorganization is not in the trusted source list, this constitutes an unverifiable dependency. It also fetches remote templates frombuiltin/encode-hls-video@latest.\n- COMMAND_EXECUTION (LOW): Executes shell commands to interface with the Transloadit CLI and local filesystem.\n- DATA_EXFILTRATION (LOW): Local video files (./input.mp4) are uploaded totransloadit.com, which is a non-whitelisted external domain. While this is the intended function of the skill, it represents a flow of local data to an external third-party service.
Audit Metadata