generate-video
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill setup involves installing standard libraries such as Remotion, Zod, and AJV from the official npm registry. It also performs network requests to Google's Generative AI API to generate visual assets for video scenes, which is consistent with its intended use case.
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform project analysis (e.g., git log, find, grep) and to invoke the Remotion CLI for rendering. These commands are executed via scripts that include security checks to prevent path traversal and ensure that only intended files are accessed.
- [SAFE]: Analysis of the skill's scripts and documentation reveals no signs of prompt injection, persistence mechanisms, or credential harvesting. The code is well-structured and focused on validation and deterministic output.
Audit Metadata