web-video-presentation
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches assets from well-known and trusted services. It imports typography from Google Fonts (
fonts.googleapis.com) and utilizes the official NPM registry to download project dependencies during the scaffolding process. These are standard operations for web development tools. - [COMMAND_EXECUTION]: The provided shell scripts (
scaffold.sh,synthesize-audio.sh) automate project setup and audio generation. They perform routine tasks such as directory creation, file copying, and executing local CLI tools likenpmandmmx. These actions are transparent and aligned with the skill's stated purpose. - [REMOTE_CODE_EXECUTION]: Project initialization involves running
npm create vite, which is the standard way to bootstrap a Vite project. This involves executing remote code from a trusted package registry. Similarly, the audio synthesis workflow involves calling the MiniMax AI CLI, which is a documented third-party service. - [DATA_EXFILTRATION]: Analysis confirmed that the skill does not attempt to access sensitive files or exfiltrate user data. Network requests are limited to necessary developer tasks, such as fetching dependencies and interacting with the MiniMax API for audio processing as requested by the user.
Audit Metadata