pan-3d-transition
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
./scripts/insert_3d_transition.pyuses thesubprocessmodule to executeffmpeg,ffprobe, andnpx. These commands are invoked using argument lists rather than raw shell strings, which effectively mitigates shell command injection risks even when processing user-provided file paths or parameters. - [EXTERNAL_DOWNLOADS]: The skill instructions specify running
npm installwithin thevideo_effectsdirectory to set up dependencies. This is a standard procedure for project initialization using the well-known Remotion video framework. - [DYNAMIC_EXECUTION]: The script invokes
npx remotion render, which executes code within the skill's ownvideo_effectsdirectory. This is the primary intended function of the skill to generate the 3D transition effects. - [DATA_EXPOSURE]: The script interacts with local video and image files provided as arguments. There are no patterns suggesting data exfiltration or unauthorized access to sensitive system files.
Audit Metadata