video-podcast-maker
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes external command-line tools such as
ffmpeg,ffprobe,npx, andgitacross various Python and shell scripts to process media, render video compositions, and manage updates. These calls are essential to its core functionality. - [EXTERNAL_DOWNLOADS]: To perform its primary task, the skill connects to the official APIs of established cloud providers, including Microsoft Azure, OpenAI, Google Cloud, Alibaba, ByteDance, and ElevenLabs. These connections are used to send narration text and receive synthesized audio.
- [REMOTE_CODE_EXECUTION]: The skill includes a mechanism to check for and apply updates from its official GitHub repository using
git fetchandgit pull. This is a common pattern for complex automation skills and traces back to the author's infrastructure. - [DYNAMIC_EXECUTION]: The skill uses dynamic module loading in its TTS backend registry to initialize specific synthesis engines based on user preferences. This is implemented using standard Python
importliband__import__calls on a predefined set of internal modules. - [SAFE]: No malicious patterns such as obfuscation, unauthorized data exfiltration, or safety filter bypasses were detected. The technical behaviors are well-documented and aligned with the skill's stated purpose.
Audit Metadata