kids-song-video
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches required assets such as GSAP libraries and fonts from the well-known jsDelivr CDN.
- [EXTERNAL_DOWNLOADS]: Downloads machine learning models for audio transcription from Hugging Face when first running the faster-whisper script.
- [COMMAND_EXECUTION]: Uses local scripts and the ffmpeg utility to handle video composition, slow-motion interpolation, and file concatenation.
- [INDIRECT_PROMPT_INJECTION]: Ingests user-supplied song topics and children's photos; the attack surface is limited as these inputs are processed by media generation APIs with no path to code execution.
Audit Metadata