music-to-video
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/analyze-beatgrid.py calls ffmpeg using subprocess.run with arguments passed as a list. This prevents shell injection and ensures the external tool is invoked securely.
- [EXTERNAL_DOWNLOADS]: Video templates load GSAP and Three.js from the jsdelivr CDN. The script reference in assemble-index.mjs includes a Subresource Integrity (SRI) hash, which validates the file content against tampering.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from user-supplied briefs and assets. Mandatory Evidence Chain: (1) Ingestion point: Step 0 setup reads BRIEF.md and processes assets via scripts/stage-assets.mjs; (2) Boundary markers: Absent; (3) Capability inventory: Subprocess calls in scripts/analyze-beatgrid.py and file-writing in scripts/assemble-index.mjs; (4) Sanitization: The intro-kinetic-cascade template implements a cleanSvg function that uses DOMParser and an allow-list to strip dangerous tags (script, image) and event handlers, mitigating injection risks.
- [OBFUSCATION]: Minified JavaScript libraries (gsap.min.js) are included to facilitate complex animations. These are standard third-party assets and do not contain hidden malicious logic.
Audit Metadata