humanlayer-to-video
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The pipeline utilizes the
bunxrunner to fetch thehyperframestool from the npm registry and relies on the Deepgram CLI for speech synthesis and recognition services. - [COMMAND_EXECUTION]: Orchestrates the use of
ffmpegandffprobefor media file manipulation, such as audio encoding and duration probing. Commands are executed throughexecFileSyncwith properly structured arguments to avoid shell injection. - [PROMPT_INJECTION]: The skill handles untrusted Markdown input as a core part of its workflow. It mitigates indirect prompt injection risks by explicitly instructing the agent to perform an 'adversarial faithfulness audit' to ensure the distilled narration remains grounded in the source text and free from hallucinations.
Audit Metadata