google-gemini-omni-video
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces strict security and operational guidelines for managing sensitive data.
- It specifies server-side storage for API keys and recommends restricting their scope.
- It mandates the deletion of remote File API resources and temporary local files after use to minimize the data footprint.
- [SAFE]: Network operations are restricted to trusted infrastructure.
- The implementation uses official Google API endpoints (
generativelanguage.googleapis.comandaiplatform.googleapis.com). - The reference script includes a
PinnedHTTPSConnectionclass to verify endpoint identity and resolution before transmission. - [SAFE]: Robust validation logic is implemented for generated artifacts.
- The skill uses
ffprobeandffmpegto programmatically verify video parameters such as FPS, resolution, and duration. - Cryptographic hashing (SHA-256) is used to maintain a ledger of source and output media, ensuring integrity and provenance.
- [SAFE]: A fail-closed transaction model prevents unauthorized or redundant spending.
- The workflow requires a unique attempt UUID and a cryptographic hash of the approved plan.
- The script uses an atomic attempt log to prevent concurrent or replayed executions of paid API calls in the event of connection failures.
Audit Metadata