image-to-video
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill accesses sensitive files and environment variables including
~/.meitu/credentials.json,MEITU_OPENAPI_ACCESS_KEY, andMEITU_OPENAPI_SECRET_KEY. This is documented as the standard method for the Meitu CLI to handle its own authentication and is considered safe behavior for a skill authored by the vendor. - [COMMAND_EXECUTION]: The skill executes the
meituCLI tool to process images into videos. This is the primary intended function of the skill and follows standard command-line practices. - [EXTERNAL_DOWNLOADS]: The skill references a
meitu tools updatecommand and uses external API endpoints (video_toffee_i2v_v20, etc.) to perform its tasks. These operations are directed at the vendor's own infrastructure and are considered routine functionality.
Audit Metadata