explainer-video
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- System Command Execution: The skill executes
ffmpegthrough a bundled Python script (scripts/render_video.py) to assemble video and audio. While this is a high-capability operation, the script follows security best practices by passing arguments as a list rather than a shell-interpreted string, which helps prevent command injection vulnerabilities. - Workplace Data Access: The skill utilizes tools to gather information from M365 and local files to generate video content. It implements a mandatory "script gate" that requires explicit user approval of the storyboard and narration before any media generation or rendering commences, ensuring the user retains control over the data processed.
- Local File Operations: The skill performs extensive local file system operations, including creating a
working/directory to store generated image cards, temporary subtitle files, and the final video output. These operations are restricted to the skill's own workspace.
Audit Metadata