Skills
Navigate
skills/gooseworks-ai/goose-skills/render-hand-swipe-flavor-listicle/Gen Agent Trust Hub

render-hand-swipe-flavor-listicle

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions provide curl commands to download media assets from an Amazon CloudFront distribution (d2m0qbg34x1ii2.cloudfront.net) and font files from Google's official GitHub repository. These are legitimate resources required for the video generation process.
  • [COMMAND_EXECUTION]: The main script (build_hand_swipe_listicle.py) and test script (make_smoke_inputs.py) utilize subprocess.run and subprocess.Popen to call ffmpeg and ffprobe. These system calls are constructed using lists of arguments rather than shell strings, which effectively mitigates the risk of shell injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 01:55 PM