editframe-api
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill documentation follows security best practices for secret management, instructing users to use environment variables for API keys and warning against hardcoding them or exposing them in client-side code.
- [EXTERNAL_DOWNLOADS]: The skill facilitates communication with official Editframe services and repositories. It utilizes the official
@editframe/apiand@editframe/assetspackages and interacts solely with legitimate vendor domains such as editframe.com and its subdomains. - [COMMAND_EXECUTION]: Local file system operations (reading and writing media files) are performed using standard Node.js APIs (fs), which are necessary for the skill's primary function of media processing.
- [DATA_EXFILTRATION]: All network requests are directed to the vendor's official API endpoints for legitimate purposes like uploading assets or fetching render progress.
Audit Metadata