hand-drawn-canvas-animation
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: Extensive analysis of the 55 files, including the core animation logic and rendering scripts, revealed no malicious behavior. The skill follows standard practices for procedural animation and media processing.
- [COMMAND_EXECUTION]: The scripts
render.mjs,photo.mjs, androto.pyperform legitimate subprocess executions offfmpeg,chromium, andrembg. These tools are used as described for video encoding, frame capturing, and background removal of assets. Parameters for these commands are either internally generated or derived from sanitized metadata. - [EXTERNAL_DOWNLOADS]: The skill relies on standard package managers (
npm,pip) to install well-known libraries such aspuppeteer-core,numpy, andpillow. Documentation also guides the user to fetch open-access (CC0) assets from the Metropolitan Museum of Art's public API, which is a recognized and trusted source.
Audit Metadata