gsap
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/extract-audio-data.pyexecutes theffmpegcommand-line tool viasubprocess.run. This is used to decode audio or video files into raw PCM samples for visualization processing. The command is constructed as a list, which prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The
references/effects.mdfile includes script tags referencing the GSAP library and TextPlugin fromcdn.jsdelivr.net. These are well-known and trusted content delivery networks used for web development assets. - [SAFE]: The Python script uses standard libraries (
argparse,json,subprocess) andnumpyfor signal processing. It does not perform any network operations, access sensitive files, or attempt to persist on the system.
Audit Metadata