create-kinetic-typography

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/render.py uses subprocess.Popen to invoke ffmpeg. This is a standard and safe implementation for processing video frames generated by the script into an H.264 video file. The command uses fixed, safe arguments and does not incorporate unvalidated user shell input.
  • [NO_CODE_VULNERABILITIES]: Analysis of scripts/render.py shows robust validation of input configurations, including bounds checks for video dimensions, frame rates, and animation durations. Font loading is restricted to a set of predefined system candidates or an explicitly provided local file path.
  • [DATA_EXPOSURE_NONE]: The skill operates entirely on local data and does not contain any network-facing code, ensuring that user content and local environment details are not exfiltrated.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 11:34 AM