render-ig-live-gallery

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/build.py invokes ffmpeg via subprocess.run to encode the final video. The command is executed using a list of arguments (shell=False), and parameters like the frame rate and output path are controlled via the local configuration file and command-line arguments, which is a safe and expected use for a rendering skill.
  • [DATA_EXPOSURE]: The skill operates entirely on local assets (images and configuration) provided by the user. It does not perform any network operations, access sensitive system directories, or attempt to exfiltrate data.
  • [REMOTE_CODE_EXECUTION]: No external scripts or remote payloads are downloaded or executed. The skill relies on standard local libraries for image processing and system tools for video encoding.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 05:21 AM
Security Audit — agent-trust-hub — render-ig-live-gallery