lingjian-video
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides functionality via the
lj ingest commandandlj ingest codextools to execute shell commands and capture their output or terminal recordings. These are used to generate 'evidence' artifacts for the project's auditable production trail. - Evidence found in
scripts/providers/terminal_record_cli.pywhere user-supplied command strings are executed viasubprocess.runafter being parsed byshlex.split. - Evidence in
packages/core/credentials.pywhere OS-native tools likesecurity(macOS) andsecret-tool(Linux) are used to securely manage API credentials. - [EXTERNAL_DOWNLOADS]: The skill facilitates connections to external cloud providers for AI services (TTS and video generation).
- Evidence in
scripts/providers/seedance_scene_cli.pyandproviders/volcengine_tts.pywhich perform network requests to Volcengine (Bytedance) API endpoints. - Evidence in
providers/openai_compatible.pywhich connects to user-configured OpenAI-compatible endpoints. - The skill utilizes
npxfor dynamic execution of thehyperframesutility as documented inpackages/core/visual_generation.py.
Audit Metadata