motion-video-maker

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The file runtime/gsap/SplitText.min.js contains a regular expression utilizing the Unicode Tags block (U+E0020–U+E007F). These characters are functionally necessary for the standard segmentation of Emoji Tag Sequences and complex scripts, and do not represent a steganographic prompt injection vector in this context.
  • [EXTERNAL_DOWNLOADS]: The scripts/install-fonts.mjs utility automates the retrieval of open-source Chinese fonts. All target URLs point to well-known and trusted infrastructure, specifically official repositories within the Google Fonts and Noto CJK organizations on GitHub, as well as the jsDelivr CDN. These downloads are constrained to font assets required for the skill's primary operation.
  • [COMMAND_EXECUTION]: The script scripts/render.mjs facilitates the encoding of rendered frames into an MP4 container by spawning an ffmpeg subprocess. The parameters passed to the encoder are derived from numeric metadata (FPS, dimensions, quality) and sanitized path strings, presenting no identifiable risk of arbitrary command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 05:27 PM
Security Audit — agent-trust-hub — motion-video-maker