teaser-video

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes ffmpeg via Python's subprocess.run in scripts/sheet.py and scripts/verify-sync.py to extract frames and process audio. These calls use the list-based argument format, which is a secure practice to prevent shell injection.
  • [EXTERNAL_DOWNLOADS]: The composition template in examples/openseo-ai-visibility/video/index.html loads resources from well-known and established CDNs at runtime, including Google Fonts (fonts.googleapis.com) and the GSAP animation library from jsDelivr (cdn.jsdelivr.net).
  • [COMMAND_EXECUTION]: The skill uses npx hyperframes@0.8.62 to lint and render the final video compositions. The use of a pinned version helps ensure reproducibility and mitigates risks associated with unversioned remote execution.
  • [COMMAND_EXECUTION]: Automated browser interactions for capturing screenshots are performed using Playwright (scripts/capture.mjs). The script includes a dedicated sign-in helper that attempts to bypass bot detection to allow for legitimate user-authenticated captures.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 08:11 AM