create-lipsync-veed-fal
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script uses
ffprobeviasubprocess.check_outputto verify the duration of input audio and output video. The implementation correctly passes arguments as a list, which prevents command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill downloads generated video files from fal.ai and suggests installing the
fal-clientlibrary. These operations are essential for the skill's purpose and target a well-known AI infrastructure provider. - [CREDENTIALS_SAFE]: API keys are managed via environment variables (
FAL_API_KEYorFAL_KEY) and.envfiles, following best practices for secret management. - [DATA_EXPOSURE]: The skill uploads user-provided image and audio files to fal.ai for processing. This data flow is expected and necessary for the lipsync generation functionality.
Audit Metadata