hero-demo
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute local Python scripts and shell utilities like
ffmpegandgsutil. These commands are used to generate audio via TTS, trim files, and upload assets to cloud storage as part of the intended media composition workflow. - [EXTERNAL_DOWNLOADS]: The documentation references several Python dependencies required for the local generation script, including
qwen_tts,whisper,soundfile,numpy, andtorch. These are standard packages for the described machine learning and audio processing tasks. - [DATA_EXFILTRATION]: The workflow involves uploading generated audio files to a Google Cloud Storage bucket (
gs://editframe-assets-7ac794b/hero/). Since these resources belong to the vendor's infrastructure ('editframe'), this behavior is consistent with the skill's purpose of deploying web assets to a CDN (assets.editframe.com).
Audit Metadata