vox-skill

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess to call ffmpeg and ffprobe for processing local media files. These calls are restricted to legitimate metadata extraction and audio/video manipulation.\n- [EXTERNAL_DOWNLOADS]: Fetches the edge-tts package from PyPI and utilizes Microsoft's Edge TTS service for narration synthesis. These are established services and libraries within the specified domain.\n- [DYNAMIC_EXECUTION]: Local compilation of cutout.swift occurs during the asset production phase. This script utilizes the macOS Vision framework for subject extraction, which is an expected behavior for a video creation tool.\n- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external narration text into the TTS pipeline, the data does not influence control flow or execute instructions, posing no threat to the execution environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 12:36 PM