di-demo-brand-kit
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches typography assets from Google Fonts using the official
@remotion/google-fontspackage. - [EXTERNAL_DOWNLOADS]: Downloads AI-generated audio and video content from fal.ai's infrastructure during the video generation workflow.
- [COMMAND_EXECUTION]: Includes a Playwright-based script (
scripts/capture-screenshots.ts) designed to automate the capture of internal application UI for use in video templates. - [COMMAND_EXECUTION]: Provides structured scripts for interacting with the fal.ai API to generate voiceovers, sound effects, and B-roll video clips.
- [CREDENTIALS_UNSAFE]: Demonstrates safe secret management by instructing users to provide API keys via environment variables (
.env) and correctly using.env.exampleas a template without hardcoding credentials. - [SAFE]: The instructions for moving skill-related directories to
/tmp/are a benign workaround to allow standard scaffolding tools (likecreate-video) to run in an otherwise non-empty directory.
Audit Metadata