scroll-world

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes bash scripts in references/pipeline.md for local execution of ffmpeg, ffprobe, cwebp, and higgsfield CLI. These commands are transparently documented and necessary for processing video and generating AI assets.
  • [EXTERNAL_DOWNLOADS]: The pipeline facilitates downloading AI-generated images and videos from Higgsfield's results URLs using curl. These downloads are part of the intended asset creation workflow.
  • [SAFE]: The Python script references/knockout.py uses the standard Pillow (PIL) library for local image manipulation (background removal) without any network or system-altering capabilities.
  • [SAFE]: The JavaScript engine references/scrub-engine.js is a vanilla media controller that uses standard web APIs (fetch, Blobs, and Object URLs) to ensure smooth video scrubbing and cross-browser compatibility. It does not perform any unauthorized data transmission or exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 01:45 AM
Security Audit — agent-trust-hub — scroll-world