scroll-world
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes bash scripts in
references/pipeline.mdfor local execution offfmpeg,ffprobe,cwebp, andhiggsfieldCLI. These commands are transparently documented and necessary for processing video and generating AI assets. - [EXTERNAL_DOWNLOADS]: The pipeline facilitates downloading AI-generated images and videos from Higgsfield's results URLs using
curl. These downloads are part of the intended asset creation workflow. - [SAFE]: The Python script
references/knockout.pyuses the standard Pillow (PIL) library for local image manipulation (background removal) without any network or system-altering capabilities. - [SAFE]: The JavaScript engine
references/scrub-engine.jsis a vanilla media controller that uses standard web APIs (fetch, Blobs, and Object URLs) to ensure smooth video scrubbing and cross-browser compatibility. It does not perform any unauthorized data transmission or exfiltration.
Audit Metadata