intro-trailer

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Python's subprocess module and Bash scripts to execute media processing commands via ffmpeg, ffprobe, magick (ImageMagick), and rsvg-convert. These operations are standard for the skill's purpose of scaling, color grading, and compositing video assets.
  • [EXTERNAL_DOWNLOADS]: The skill programmatically interacts with the Runway ML API (api.dev.runwayml.com) to submit video generation tasks and download resulting MP4 files. It also provides guidance for using curl to fetch assets from public storage or content delivery networks.
  • [CREDENTIALS_SAFE]: API authentication is handled securely by reading the RUNWAY_API_KEY from a user-managed local file (~/.runway/credentials), avoiding hardcoded secrets and following standard security practices for command-line tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 02:40 PM
Security Audit — agent-trust-hub — intro-trailer