gsap
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official animation libraries from the jsDelivr CDN.
https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js: The core GreenSock Animation Platform library.https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/TextPlugin.min.js: A plugin for text-based animation effects.- These are well-known, versioned assets from a reputable service, used as intended for UI animation.
- [COMMAND_EXECUTION]: The
scripts/extract-audio-data.pyscript invokes theffmpegcommand-line tool. subprocess.run(cmd, capture_output=True): This is used to decode audio files into raw sample data for visualization analysis.- The command is constructed using a list of arguments, which prevents shell-related injection vulnerabilities by avoiding direct shell interpretation.
- The use of
ffmpegis standard and necessary for the script's primary purpose of audio feature extraction.
Audit Metadata