sora
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
uvto dynamically fetch the officialopenaiPython package from the public PyPI registry. This is a standard and expected dependency for interacting with the Sora API. - [COMMAND_EXECUTION]: All core functionality is encapsulated within a bundled Python script (
scripts/sora.py), which the agent is instructed to run for deterministic video management tasks. This approach minimizes the risk of brittle shell escaping issues common in raw command-line generation. - [DATA_EXFILTRATION]: The skill transmits project-related prompts and media files to OpenAI's verified API endpoints for the purpose of video generation. It explicitly advises users to manage their
OPENAI_API_KEYthrough local environment variables rather than sharing them in dialogue.
Audit Metadata