motion-video-maker
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The file
runtime/gsap/SplitText.min.jscontains a regular expression utilizing the Unicode Tags block (U+E0020–U+E007F). These characters are functionally necessary for the standard segmentation of Emoji Tag Sequences and complex scripts, and do not represent a steganographic prompt injection vector in this context. - [EXTERNAL_DOWNLOADS]: The
scripts/install-fonts.mjsutility automates the retrieval of open-source Chinese fonts. All target URLs point to well-known and trusted infrastructure, specifically official repositories within the Google Fonts and Noto CJK organizations on GitHub, as well as the jsDelivr CDN. These downloads are constrained to font assets required for the skill's primary operation. - [COMMAND_EXECUTION]: The script
scripts/render.mjsfacilitates the encoding of rendered frames into an MP4 container by spawning anffmpegsubprocess. The parameters passed to the encoder are derived from numeric metadata (FPS, dimensions, quality) and sanitized path strings, presenting no identifiable risk of arbitrary command injection.
Audit Metadata