video-producer-agent
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/assemble.pyexecutes external binaries includingffmpegand multiple sibling Python scripts (veo.py,gemini_tts.py,lyria.py,audio_mix.py,video_concat.py,video_audio_merge.py) to perform media processing and generation tasks. - [DYNAMIC_EXECUTION]: The orchestration logic in
scripts/assemble.pydynamically resolves paths to other skill scripts based on environment variables (CLAUDE_PLUGIN_ROOT) and common installation paths (~/.cursor/extensions/skills,~/.claude/plugins/cache) before executing them viasubprocess.Popen. All command executions use list-based arguments, which effectively mitigates command injection risks.
Audit Metadata