typewriter-video
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to fetch static assets (fonts and audio files) from external repositories. Specifically, it references Geist fonts from Vercel's GitHub releases, mechanical keyboard sound packs from the MechSim repository, and the Virgil handwriting font from the Excalidraw CDN (UNPKG). These downloads are for static content used in video production and do not involve executable scripts.
- [OBFUSCATION]: The engine uses specific Unicode characters in its rendering logic, such as
\u200B(Zero Width Space) for line-break management and\uFFFC/\uFFFDas object markers. These are explicit string literals in the source code used for functional layout purposes rather than hiding malicious instructions. - [COMMAND_EXECUTION]: The documentation includes standard shell commands for project initialization (cp, npm install) and asset troubleshooting (git clone, curl, rsync). These commands are typical for development workflows and target the project's local directory or temporary folders for asset staging.
Audit Metadata