changelog-video
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several command-line tools including Node.js, Bun, and FFmpeg to automate the video creation process. These executions are integral to the skill's primary function of speech synthesis, caption alignment, and video encoding.
- [EXTERNAL_DOWNLOADS]: The HTML master template references the GSAP animation library from the JSDelivr CDN. This is a standard and trusted practice for providing high-performance animations in web-based video compositions.
- [COMMAND_EXECUTION]: The skill interacts with the HeyGen CLI for text-to-speech services. This involves authenticated API calls to the vendor's infrastructure to generate audio assets, which is the intended behavior for this branding tool.
- [DATA_EXFILTRATION]: While the skill processes external markdown files, it does so within a structured pipeline that converts text into audio and video frames. There is no evidence of unauthorized data transfer to non-whitelisted or suspicious domains.
Audit Metadata