create-ugc-with-product-clips

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard command-line tools for processing media, including ffmpeg for complex video composition and crossfades, and whisper for speech-to-text transcription.
  • [EXTERNAL_DOWNLOADS]: The workflow involves downloading the openai-whisper package via pip and the ffmpeg utility via Homebrew, as well as fetching product image assets from Shopify CDNs and interacting with the Creatify and Higgsfield APIs for asset generation.
  • [SAFE]: The documentation for handling API credentials (CREATIFY_API_ID and CREATIFY_API_KEY) correctly advises users to store them in a .env file at the project root, adhering to security best practices for environment variable management.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 04:39 PM
Security Audit — agent-trust-hub — create-ugc-with-product-clips