mediapipe-usage
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches WASM runtimes and machine learning model assets (.task files) from JSDelivr (cdn.jsdelivr.net) and Google Cloud Storage (storage.googleapis.com). These are well-known and trusted sources for official software assets.
- [COMMAND_EXECUTION]: Includes standard documentation for installing required dependencies using the
pnpm add @mediapipe/tasks-visioncommand. - [DATA_EXFILTRATION]: The skill uses
navigator.mediaDevices.getUserMediato access the webcam for pose estimation. Analysis shows this data is processed locally by the MediaPipe task, and there are no network requests sending sensitive visual data to unauthorized external domains.
Audit Metadata