video-to-particle-field
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/inspect_media.pyusessubprocess.runto executeffprobe. This is a legitimate use case for gathering media metadata (dimensions, bitrate, duration) required for the particle field's performance budget and sampling logic. The command is constructed using a list (preventing shell injection) and operates on user-provided file paths for local media analysis. - [EXTERNAL_DOWNLOADS]: The skill mentions external media via URL in
references/canvas-pipeline.md, but correctly advises on CORS safety (crossOrigin="anonymous") and prefers local assets for security and performance. There are no automated untrusted downloads. - [DATA_EXPOSURE]: The implementation handles local media files for visual processing. Pixel data is processed entirely client-side in an offscreen canvas for rendering purposes only, with no evidence of data exfiltration or unauthorized access to sensitive files.
Audit Metadata