Skills
skills/gooseworks-ai/goose-skills/render-3d-character-explainer/Gen Agent Trust Hub

render-3d-character-explainer

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/compose.py script executes ffmpeg and ffprobe using the subprocess.run method to perform video editing tasks such as trimming, scaling, and concatenating segments. The script correctly uses argument lists rather than shell strings, preventing shell injection vulnerabilities.
  • [COMMAND_EXECUTION]: The skill includes a dedicated _ass_escape function to sanitize file paths used in FFmpeg's ass filter. This prevents potential injection attacks within the FFmpeg filtergraph by properly escaping backslashes, colons, and single quotes.
  • [SAFE]: The skill operates entirely on local files provided via configuration and command-line arguments. No network requests, external downloads, or attempts to access sensitive system credentials were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 09:42 AM
Security Audit — agent-trust-hub — render-3d-character-explainer