explainer-video

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • System Command Execution: The skill executes ffmpeg through a bundled Python script (scripts/render_video.py) to assemble video and audio. While this is a high-capability operation, the script follows security best practices by passing arguments as a list rather than a shell-interpreted string, which helps prevent command injection vulnerabilities.
  • Workplace Data Access: The skill utilizes tools to gather information from M365 and local files to generate video content. It implements a mandatory "script gate" that requires explicit user approval of the storyboard and narration before any media generation or rendering commences, ensuring the user retains control over the data processed.
  • Local File Operations: The skill performs extensive local file system operations, including creating a working/ directory to store generated image cards, temporary subtitle files, and the final video output. These operations are restricted to the skill's own workspace.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 11:55 PM
Security Audit — agent-trust-hub — explainer-video