music-to-video

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/analyze-beatgrid.py executes the ffmpeg command-line tool using subprocess.run to decode and normalize audio files before analysis.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of standard Python data science and audio processing packages including librosa, numpy, and soundfile. Additionally, generated HTML compositions reference the GreenSock Animation Platform (GSAP) via the well-known jsDelivr CDN.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect injection as it processes user-provided storyboard plans and media assets. However, the logo-split-lockup-pulse template includes a robust SVG sanitization function (cleanSvg) designed to strip potentially malicious active content (scripts, handlers) from user-supplied vector graphics, mitigating XSS risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 04:45 PM
Security Audit — agent-trust-hub — music-to-video