meme-creator

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes established media utilities such as ffmpeg and yt-dlp for video processing and acquisition. These operations are performed in a localized manner using scratch directories.
  • [EXTERNAL_DOWNLOADS]: Video content and avatar assets are fetched from well-known platforms (e.g., YouTube, Bilibili, and unavatar.io). These network operations are essential for the skill's primary functionality and target established services.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied URLs and entity names but mitigates risks through a mandatory 'Identity Disambiguation Gate' described in references/asset-binding.md. This ensures that assets are verified and disambiguated before being integrated into the workflow.
  • [SAFE]: Python dependencies such as numpy, pillow, and opencv-python-headless are standard, well-known libraries used for media manipulation and are managed via secure inline script declarations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 04:13 PM