colab-video-pipeline — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited colab-video-pipeline (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to process Jiang Lens video sources through the Colab notebooks in ops/notebooks/colab/.
ops/secrets/browser-profiles/colab/.yt-dlp cookies belong in Google Drive at /content/drive/MyDrive/jianglens/cookies.txt.HF_TOKEN when possible.The canonical Drive root is:
/content/drive/MyDrive/jianglens/
_colab_envs/
_hf_home/
cookies.txt
youtube/
_config.json
<channel-or-handle>/
_channel.json
<video-id>/
audio.wav
metadata.youtube.json # optional; local import can create this by video id
dump.json
grouped.json
transcription.jsonLocal text artifact sync uses:
./ops/notebooks/colab/sync-drive.sh --dry-run
./ops/notebooks/colab/sync-drive.shYouTube_Manager.ipynb: register channels, filter, download audio.wav into Drive.Pyannote_4_Pipeline-GPT-5.3.ipynb: produce dump.json and grouped.json.Whisper_Transcription.ipynb: produce transcription.json.sync-drive.sh: copy text artifacts from Drive to content/sources/raw/youtube.Before running browser automation:
MyDrive/jianglens.ops/secrets/browser-profiles/colab/.ops/staging/.Success means expected Drive artifacts exist:
audio.wavmetadata.youtube.json in synced raw source artifacts when YouTube metadata was resolvable. If the notebook did not write it, ops/scripts/import-colab-video.mjs can fetch and cache it by video id.dump.json and grouped.jsontranscription.json with turns[].words[] word timestamps when Whisper produced them.The website transcript reader uses those word timestamps for phrase-level highlighting. If transcription.json has no turns[].words[], do not silently proceed as if phrase tracking exists; rerun Whisper_Transcription.ipynb with word_timestamps: True or mark the import as block-timed only.
If a notebook has RUN_BATCH = False, do not assume it processed videos. Either the maintainer must set it in Colab, or the automation must intentionally set it before running the batch cell.
After syncing Drive artifacts into the repo, import a processed video with:
node ops/scripts/import-colab-video.mjs --video-id VIDEO_ID --channel @PredictiveHistoryThe importer uses raw metadata.youtube.json when present. If it is missing, it tries yt-dlp by video id and caches compact metadata back into the raw source artifact folder. Publication dates are required for canon promotion; undated imports are review/search material only.
If YouTube blocks metadata-only access, provide a runtime-only cookie file. The importer accepts --youtube-cookies PATH, checks JIANGLENS_YOUTUBE_COOKIES_FILE, YOUTUBE_COOKIES_FILE, and YTDLP_COOKIES_FILE, and also looks for ignored local files at ops/secrets/youtube.com_cookies.txt or /var/lib/spawnfile/secrets/youtube.com_cookies.txt. Never commit the cookie file or print its contents.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.