reverse-animate
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes
ffmpegandffprobevia thesubprocessmodule to extract video metadata, detect scene cuts, and identify static frames. These invocations useshlex.quoteto sanitize file paths and prevent command injection. - [DYNAMIC_EXECUTION]: The orchestrator (
scripts/07_orchestrator.py) and the render script (scripts/06_render_diff.py) useimportlib.import_moduleto load pipeline stages dynamically from the localscripts/directory. - [DYNAMIC_EXECUTION]: To measure fidelity,
scripts/06_render_diff.pygenerates a temporary Python script that uses Playwright to record the generated animation. This script is then executed as a separate process. - [EXTERNAL_DOWNLOADS]: The
build_preview_htmlfunction in the orchestrator generates an HTML file that references the GSAP animation library from the well-known CDNunpkg.comfor preview purposes. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided video content through a Vision Language Model (VLM), which represents a potential injection surface.
- Ingestion points: Visual frames extracted from the user's video are provided to the VLM in
scripts/04_vlm_analyze.py. - Boundary markers: The system prompt explicitly instructs the model to adhere to visual analysis and ignore timing, while the pipeline enforces a strict JSON schema for all VLM outputs.
- Capability inventory: The skill possesses capabilities for file system writes, image/video processing, and subprocess execution.
- Sanitization: The skill employs
jsonschemato validate the model's response before it is used to generate code, and usesshlexfor shell command safety.
Audit Metadata