linyuebanzi-teaching-animation

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx within scripts/build_video.sh to download and execute the hyperframes package from the npm registry, which is a well-known service for software dependencies.
  • [COMMAND_EXECUTION]: The workflow relies on several shell scripts (scripts/render.sh, scripts/build_video.sh) and Python scripts (scripts/minimax_tts.py) that execute external CLI tools including manim, ffmpeg, ffprobe, and the macOS say command for media rendering and processing.
  • [DATA_EXFILTRATION]: The scripts/minimax_tts.py script transmits narration text to the Minimax API (api.minimaxi.com) to generate audio files. This is a documented and necessary function for the skill's video generation pipeline.
  • [CREDENTIALS_UNSAFE]: The skill follows secure practices by instructing users to provide sensitive credentials (such as MINIMAX_API_KEY) via environment variables rather than hardcoding them in the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 04:01 AM
Security Audit — agent-trust-hub — linyuebanzi-teaching-animation