product-video-ad
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
ffmpegand thedlazyCLI to process video files and manage AI generation tasks. These operations are performed using Node.jschild_process.spawnwith defined argument arrays, which is a secure method for executing external utilities. - [EXTERNAL_DOWNLOADS]: The skill communicates with well-known AI service providers including OpenAI, Google Gemini, Fal.ai, Replicate, and ByteDance's Ark for content generation. It securely downloads the resulting media files to a local output directory as part of its core functionality.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill handles API credentials through environment variables (e.g.,
OPENAI_API_KEY,FAL_KEY), which is a recommended practice for secret management. No unauthorized data transmission or sensitive file access was observed. - [SAFE]: The code follows standard development patterns for media automation. The custom YAML parser and utility scripts are transparent and perform only their stated functions without any hidden or malicious logic.
Audit Metadata