manim-video-with-tts
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The scripts
scripts/tts_measure.pyandscripts/stitch_mux.pycall external utilities includingffmpeg,ffprobe, andvolc-tts. These calls are implemented using Python'ssubprocess.runwith argument lists, which prevents shell command injection by ensuring that inputs are not interpreted as shell commands. - [PROMPT_INJECTION]: The skill ingests narration text from a user-supplied
plan.mdfile. Analysis of this indirect input surface shows it is handled safely; the extracted text is passed as a literal string to the TTS engine via subprocess calls, preventing any embedded instructions from influencing the agent's logic or the system's execution.
Audit Metadata