render-proof-points-overlay
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
fetch_icons.pyscript downloads Twemoji PNG assets from the jsDelivr CDN (cdn.jsdelivr.net). This is a well-known service used to retrieve standard open-source icons needed for the rendering process.\n- [COMMAND_EXECUTION]: Thecompose_master.pyscript executes ffmpeg and ffprobe using subprocess.run. These calls are used to scale, crop, and composite video layers according to the layout defined in the configuration. The script uses argument lists rather than shell strings, which follows security best practices to prevent shell injection.
Audit Metadata