create-imessage-video-ad
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a legitimate and well-documented workflow for video production. It uses industry-standard tools like Playwright and ffmpeg to achieve its goals.
- [COMMAND_EXECUTION]: The skill uses
execSyncandsubprocess.runto invokeffmpegandpython3for media processing. Analysis confirms that command arguments are handled safely (e.g., using list-based arguments in Python) and derived from trusted local metadata (e.g.,ffprobeoutput). - [EXTERNAL_DOWNLOADS]: The documentation references external sources for assets (BigSoundBank for SFX, brandfetch for logos) and optional AI services (fal.ai). These are well-known services relevant to the skill's purpose and do not represent a security risk.
- [REMOTE_CODE_EXECUTION]: JavaScript is executed within a local Playwright browser context to render the chat UI. This is the core functionality of the skill and is confined to the local rendering environment for video generation.
Audit Metadata