xai-grok-imagine-video
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The provided Python script executes
ffprobeandffmpegto validate local source media and generated results. These calls use strictly defined arguments and include time and output size limits to prevent resource exhaustion. - [EXTERNAL_DOWNLOADS]: The skill facilitates communication with the xAI API and handles the download of video artifacts. It incorporates robust security measures including exact hostname verification, public DNS pinning to prevent SSRF or DNS rebinding, and strict file size caps.
- [SAFE]: The skill emphasizes security best practices for API integration, such as using environment variables for credentials, implementing a transaction ledger for idempotency, and requiring explicit human approval for cost ceilings.
Audit Metadata