8-bit-video-gen
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses official SDKs to communicate with well-known services (Google Gemini and Replicate) to generate and download image and video content.
- [COMMAND_EXECUTION]: The skill executes local Python scripts using the
uvtool to automate the pixel-art generation pipeline. These scripts are contained within the skill folder and perform defined image processing tasks. - [CREDENTIALS_UNSAFE]: The skill correctly manages sensitive credentials (
GEMINI_API_KEYandREPLICATE_API_TOKEN) by loading them from the shell environment or a.envfile, adhering to standard security practices for local development tools. - [DATA_EXPOSURE]: The scripts read user-provided image files and write output files (PNG and MP4) to the local file system as part of the intended image processing workflow.
Audit Metadata