laohan-donghua
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the GSAP animation library from the jsdelivr.net CDN and typographic assets from Google Fonts. Both are well-known and trusted providers for web and video automation resources.
- [COMMAND_EXECUTION]: The workflow requires several local command-line operations, specifically
npx hyperframesfor rendering,ffmpegfor media encoding, andnodefor executing specialized animation analysis scripts. These are standard tools within the video production ecosystem and are necessary for the skill's operation. - [REMOTE_CODE_EXECUTION]: An optional remote API call to SiliconFlow is provided for audio-to-text transcription. This operation targets an established service, uses a user-defined API key, and is a functional requirement for generating synchronized overlays.
- [PROMPT_INJECTION]: While the skill ingests user-provided video scripts, it implements a structured 'Gate' process that requires the agent to summarize and extract specific keywords before they are embedded into generated code. This extraction step serves as a natural mitigation against potential indirect prompt injection attacks by filtering the raw input through the model's summarization logic.
Audit Metadata