render-imessage-cascade
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/compose.pyto execute theffmpegcommand. The execution is handled securely by passing a list of arguments rather than a shell string, preventing shell injection vulnerabilities. - [SAFE]: The Python scripts perform legitimate file operations such as reading configuration files, accessing system fonts, and writing generated image assets to a local work directory.
- [SAFE]: No network access or external downloads are performed by this skill. It relies on standard system utilities and explicitly delegates paid or remote services to other specialized capabilities.
Audit Metadata