render-imessage-cascade

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in scripts/compose.py to execute the ffmpeg command. The execution is handled securely by passing a list of arguments rather than a shell string, preventing shell injection vulnerabilities.
  • [SAFE]: The Python scripts perform legitimate file operations such as reading configuration files, accessing system fonts, and writing generated image assets to a local work directory.
  • [SAFE]: No network access or external downloads are performed by this skill. It relies on standard system utilities and explicitly delegates paid or remote services to other specialized capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 09:42 AM
Security Audit — agent-trust-hub — render-imessage-cascade