charles-arcade-motion

Pass

Audited by Gen Agent Trust Hub on Nov 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches resources from well-known and reputable services:
  • JavaScript libraries (GSAP) from JSDelivr CDN.
  • App metadata and icons via the iTunes Search API.
  • Book cover data from Open Library and Google Books API.
  • Freely licensed imagery from Wikimedia Commons.
  • Brand logos from Simple Icons.
  • AI-generated media from fal.ai endpoints.
  • [COMMAND_EXECUTION]: Several Python utility scripts (onsets.py, words.py, cast.py, qa.py, source.py, new_project.py) execute external tools to perform media processing tasks:
  • ffmpeg and ffprobe for audio/video decoding and analysis.
  • playwright via npx for automated website screenshot capture.
  • These executions are part of the intended functionality for a local development environment and are invoked using hardcoded command structures.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 7, 2026, 09:48 PM