videoforge-pipeline

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides maintenance shell scripts (scripts/check-job-status.sh, scripts/validate-video.sh) used for polling worker status and verifying video output. These scripts utilize standard command-line tools such as curl, ffprobe, and python3 for JSON parsing and media metadata extraction.
  • [EXTERNAL_DOWNLOADS]: The pipeline facilitates communication with external AI providers (Kie.ai, FakeYou, ElevenLabs) and Cloudflare R2 storage for asset management. It also fetches property information from Zillow via Apify. These operations are consistent with the skill's primary purpose of video automation.
  • [PROMPT_INJECTION]: The skill processes untrusted property data from Zillow to generate cinematic prompts. It manages this through intermediate transformation via Gemini 3 Pro and the application of complex negative prompts to ensure content safety and consistency.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 05:37 AM