vox-skill
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses subprocess to call ffmpeg and ffprobe for processing local media files. These calls are restricted to legitimate metadata extraction and audio/video manipulation.\n- [EXTERNAL_DOWNLOADS]: Fetches the edge-tts package from PyPI and utilizes Microsoft's Edge TTS service for narration synthesis. These are established services and libraries within the specified domain.\n- [DYNAMIC_EXECUTION]: Local compilation of cutout.swift occurs during the asset production phase. This script utilizes the macOS Vision framework for subject extraction, which is an expected behavior for a video creation tool.\n- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external narration text into the TTS pipeline, the data does not influence control flow or execute instructions, posing no threat to the execution environment.
Audit Metadata