videogen

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of subprocess.run to interact with system utilities for video processing and project management. Specifically, it calls ffmpeg for media encoding, ffprobe for metadata extraction, and the remotion CLI for video rendering within the project context.
  • [EXTERNAL_DOWNLOADS]: The script scripts/render_video.py executes npm install to set up the necessary React and Remotion dependencies defined in the project's package.json. This follows standard developer workflows for Node.js-based projects.
  • [COMMAND_EXECUTION]: The scripts/synthesize_f5_speech.py script employs os.execv to re-initialize itself within a detected local Python virtual environment. This mechanism is used to ensure the f5_tts machine learning dependency is correctly loaded from its specific environment without requiring global installation.
  • [COMMAND_EXECUTION]: Local command discovery in scripts/common.py searches for executables in standard user paths, including Node.js version managers like NVM, Volta, and Bun, which is consistent with maintaining compatibility across different developer environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 02:58 PM
Security Audit — agent-trust-hub — videogen