alpha-cutout

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: A comprehensive security audit was performed across all files. No instances of prompt injection, data exfiltration, obfuscation, or persistence mechanisms were detected.
  • [COMMAND_EXECUTION]: The scripts/key.py file uses subprocess.Popen to call ffmpeg for video processing. This call is implemented using a list of arguments, which is a secure practice that avoids shell interpolation and injection risks. The usage is strictly limited to the skill's core functionality of video encoding.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation identifies dependencies on well-known, reputable packages including numpy, opencv-python-headless, and pillow, as well as the standard ffmpeg utility. These are standard tools for image and video manipulation and do not originate from untrusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 01:53 PM