teaser-video
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
ffmpegvia Python'ssubprocess.runinscripts/sheet.pyandscripts/verify-sync.pyto extract frames and process audio. These calls use the list-based argument format, which is a secure practice to prevent shell injection. - [EXTERNAL_DOWNLOADS]: The composition template in
examples/openseo-ai-visibility/video/index.htmlloads resources from well-known and established CDNs at runtime, including Google Fonts (fonts.googleapis.com) and the GSAP animation library from jsDelivr (cdn.jsdelivr.net). - [COMMAND_EXECUTION]: The skill uses
npx hyperframes@0.8.62to lint and render the final video compositions. The use of a pinned version helps ensure reproducibility and mitigates risks associated with unversioned remote execution. - [COMMAND_EXECUTION]: Automated browser interactions for capturing screenshots are performed using Playwright (
scripts/capture.mjs). The script includes a dedicated sign-in helper that attempts to bypass bot detection to allow for legitimate user-authenticated captures.
Audit Metadata