talking-head-b-roll
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads fonts from Google Fonts and, if configured, fetches AI transcription models from Hugging Face. Both are trusted, well-known services used for their intended purposes.
- [REMOTE_CODE_EXECUTION]: The skill instructions guide the user to install the Playwright library and Chromium browser. These are standard tools for rendering web content and are necessary for the skill's video generation process.
- [DYNAMIC_EXECUTION]: The skill uses Playwright to execute dynamically generated JavaScript that draws graphics on a web canvas. This is a core part of its functionality to create custom visuals based on video transcripts.
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading transcriptions derived from user-provided videos. While this content could theoretically contain instructions intended to influence the AI's rendering logic, the risk is mitigated by the specific, task-oriented nature of the generated code.
Audit Metadata