creatok-generate-video
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected during the analysis. The skill's behavior aligns with its documented purpose.
- [COMMAND_EXECUTION]: The skill includes a local Node.js entry point (
scripts/run.js) used to initiate generation tasks and manage local artifact storage. It uses standardnode:fsoperations to maintain a task history in the.artifactsdirectory. - [DATA_EXFILTRATION]: The skill transmits local image files and text prompts to the vendor's API endpoint (
https://www.creatok.ai). This data transfer is a core requirement of the video generation service and is initiated only upon user request and confirmation. - [CREDENTIALS_UNSAFE]: The skill manages the
CREATOK_API_KEYvia environment variables, which is the recommended practice for secure credential handling in agentic environments.
Audit Metadata