laohan-donghua

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the GSAP animation library from the jsdelivr.net CDN and typographic assets from Google Fonts. Both are well-known and trusted providers for web and video automation resources.
  • [COMMAND_EXECUTION]: The workflow requires several local command-line operations, specifically npx hyperframes for rendering, ffmpeg for media encoding, and node for executing specialized animation analysis scripts. These are standard tools within the video production ecosystem and are necessary for the skill's operation.
  • [REMOTE_CODE_EXECUTION]: An optional remote API call to SiliconFlow is provided for audio-to-text transcription. This operation targets an established service, uses a user-defined API key, and is a functional requirement for generating synchronized overlays.
  • [PROMPT_INJECTION]: While the skill ingests user-provided video scripts, it implements a structured 'Gate' process that requires the agent to summarize and extract specific keywords before they are embedded into generated code. This extraction step serves as a natural mitigation against potential indirect prompt injection attacks by filtering the raw input through the model's summarization logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 05:30 AM
Security Audit — agent-trust-hub — laohan-donghua