alpha-cutout
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: A comprehensive security audit was performed across all files. No instances of prompt injection, data exfiltration, obfuscation, or persistence mechanisms were detected.
- [COMMAND_EXECUTION]: The
scripts/key.pyfile usessubprocess.Popento callffmpegfor video processing. This call is implemented using a list of arguments, which is a secure practice that avoids shell interpolation and injection risks. The usage is strictly limited to the skill's core functionality of video encoding. - [EXTERNAL_DOWNLOADS]: The skill's documentation identifies dependencies on well-known, reputable packages including
numpy,opencv-python-headless, andpillow, as well as the standardffmpegutility. These are standard tools for image and video manipulation and do not originate from untrusted sources.
Audit Metadata