music-to-video
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/analyze-beatgrid.pyexecutes theffmpegcommand-line tool usingsubprocess.runto decode and normalize audio files before analysis. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of standard Python data science and audio processing packages including
librosa,numpy, andsoundfile. Additionally, generated HTML compositions reference the GreenSock Animation Platform (GSAP) via the well-known jsDelivr CDN. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect injection as it processes user-provided storyboard plans and media assets. However, the
logo-split-lockup-pulsetemplate includes a robust SVG sanitization function (cleanSvg) designed to strip potentially malicious active content (scripts, handlers) from user-supplied vector graphics, mitigating XSS risks.
Audit Metadata