music-to-video
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocess.runto invokeffmpegfor audio decoding. The implementation uses a list for arguments and avoidsshell=True, which is the recommended secure practice for executing system commands. - [EXTERNAL_DOWNLOADS]: Fetches widely used and trusted libraries, including GSAP and Three.js, from the official jsDelivr CDN. These libraries are used for rendering motion graphics and 3D effects within the video compositions.
- [EXTERNAL_DOWNLOADS]: Utilizes Google Fonts for typography in the generated HTML compositions, which is a standard and safe practice for web-based media generation.
- [COMMAND_EXECUTION]: Instructs the agent to install necessary Python dependencies (
librosa,numpy,soundfile) from the standard PyPI registry usingpipduring the setup phase.
Audit Metadata