render-cartoon-music-video

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: No malicious patterns, exfiltration attempts, or obfuscated content were detected within the skill files.
  • [NO_CODE]: This skill functions as a documentation and configuration package. It references external Python scripts (stitch.py, rebuild_captions.py) for the actual assembly logic, but these scripts are not included in the provided file set, indicating the skill relies on pre-existing environment tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data, specifically song lyrics and word timestamps, to generate video captions.
  • Ingestion points: scripts/config.example.json (lyrics, song metadata), audio/word-timestamps.json (external timings).
  • Boundary markers: None identified in the provided configuration.
  • Capability inventory: The skill coordinates FFmpeg processing and uses Python scripts for file manipulation.
  • Sanitization: Not explicitly documented; however, the data is primarily used for deterministic media rendering (captions/cuts), posing minimal risk.
  • [COMMAND_EXECUTION]: The skill describes using FFmpeg for media composition, including hard-concatenation, audio muxing, and PNG overlays via the overlay filter, which are standard operations for its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 05:21 AM
Security Audit — agent-trust-hub — render-cartoon-music-video