chengfeng-visual-talking-head

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill interacts with the platform's plugin manager using the codex plugin list command to resolve the file path of the required chengfeng-videocut plugin.
  • [EXTERNAL_DOWNLOADS]: The environment setup script (ensure-runtime.cjs) is configured to fetch missing runtime dependencies from GitHub, ensuring the execution environment is properly initialized.
  • [REMOTE_CODE_EXECUTION]: The skill invokes specific JavaScript utilities (videocut-cli.cjs) found within the local plugin directory to perform complex video processing tasks such as frame extraction and visual layer management.
  • [SAFE]: Instructions specify that official brand iconography should be sourced from simple-icons, a well-known third-party provider, rather than using unverified or custom-drawn versions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 12:31 PM
Security Audit — agent-trust-hub — chengfeng-visual-talking-head