music-to-video
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's Python script 'scripts/analyze-beatgrid.py' executes the 'ffmpeg' utility to decode and normalize audio files for beat detection analysis. The execution uses a list of arguments for security.
- [EXTERNAL_DOWNLOADS]: The skill workflow involves installing established media analysis libraries (librosa, numpy, soundfile) from the Python Package Index. Additionally, visual templates download common animation and 3D graphics libraries (GSAP and Three.js) from the jsDelivr content delivery network.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text to populate video frames.
- Ingestion points: 'STORYBOARD.md' (copy fields).
- Boundary markers: Absent for user text blocks.
- Capability inventory: Sub-agents generate HTML/JS composition files ('sub-agents/frame-worker.md') containing the interpolated text.
- Sanitization: Absent; text is treated as raw content for display in video frames.
Audit Metadata