video-producer-agent

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/assemble.py executes external binaries including ffmpeg and multiple sibling Python scripts (veo.py, gemini_tts.py, lyria.py, audio_mix.py, video_concat.py, video_audio_merge.py) to perform media processing and generation tasks.
  • [DYNAMIC_EXECUTION]: The orchestration logic in scripts/assemble.py dynamically resolves paths to other skill scripts based on environment variables (CLAUDE_PLUGIN_ROOT) and common installation paths (~/.cursor/extensions/skills, ~/.claude/plugins/cache) before executing them via subprocess.Popen. All command executions use list-based arguments, which effectively mitigates command injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 03:25 AM