skills/jetbrains/skills/sora/Gen Agent Trust Hub

sora

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes uv to dynamically fetch the official openai Python package from the public PyPI registry. This is a standard and expected dependency for interacting with the Sora API.
  • [COMMAND_EXECUTION]: All core functionality is encapsulated within a bundled Python script (scripts/sora.py), which the agent is instructed to run for deterministic video management tasks. This approach minimizes the risk of brittle shell escaping issues common in raw command-line generation.
  • [DATA_EXFILTRATION]: The skill transmits project-related prompts and media files to OpenAI's verified API endpoints for the purpose of video generation. It explicitly advises users to manage their OPENAI_API_KEY through local environment variables rather than sharing them in dialogue.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 02:45 AM
Security Audit — agent-trust-hub — sora