website-to-video

SUSPICIOUS: the core website-to-video workflow is broadly aligned with its stated purpose and uses mostly official same-org tooling and official API endpoints, but it crosses the line into medium/high risk because it silently self-updates and installs/loads additional skills, creating a transitive trust chain and concealed agent action beyond the immediate task.