video-podcast-maker

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes external command-line tools such as ffmpeg, ffprobe, npx, and git across various Python and shell scripts to process media, render video compositions, and manage updates. These calls are essential to its core functionality.
  • [EXTERNAL_DOWNLOADS]: To perform its primary task, the skill connects to the official APIs of established cloud providers, including Microsoft Azure, OpenAI, Google Cloud, Alibaba, ByteDance, and ElevenLabs. These connections are used to send narration text and receive synthesized audio.
  • [REMOTE_CODE_EXECUTION]: The skill includes a mechanism to check for and apply updates from its official GitHub repository using git fetch and git pull. This is a common pattern for complex automation skills and traces back to the author's infrastructure.
  • [DYNAMIC_EXECUTION]: The skill uses dynamic module loading in its TTS backend registry to initialize specific synthesis engines based on user preferences. This is implemented using standard Python importlib and __import__ calls on a predefined set of internal modules.
  • [SAFE]: No malicious patterns such as obfuscation, unauthorized data exfiltration, or safety filter bypasses were detected. The technical behaviors are well-documented and aligned with the skill's stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 09:14 AM
Security Audit — agent-trust-hub — video-podcast-maker