chengfeng-cut-talking-head
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the shell to execute local Node.js utility scripts such as ensure-runtime.cjs and videocut-cli.cjs for project orchestration and environment management.
- [EXTERNAL_DOWNLOADS]: It is configured to automatically download missing runtime components from GitHub Releases, a well-known and trusted software distribution platform.
- [REMOTE_CODE_EXECUTION]: The skill facilitates runtime installation by downloading and executing code from GitHub via vendor-provided scripts, which is a standard procedure for this plugin.
- [SAFE]: Analysis found no evidence of malicious obfuscation, credential theft, or unauthorized network activity; the workflow incorporates human review for all primary editing actions.
Audit Metadata