create-kinetic-typography
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/render.pyusessubprocess.Popento invokeffmpeg. This is a standard and safe implementation for processing video frames generated by the script into an H.264 video file. The command uses fixed, safe arguments and does not incorporate unvalidated user shell input. - [NO_CODE_VULNERABILITIES]: Analysis of
scripts/render.pyshows robust validation of input configurations, including bounds checks for video dimensions, frame rates, and animation durations. Font loading is restricted to a set of predefined system candidates or an explicitly provided local file path. - [DATA_EXPOSURE_NONE]: The skill operates entirely on local data and does not contain any network-facing code, ensuring that user content and local environment details are not exfiltrated.
Audit Metadata