gsap
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/extract-audio-data.pyinvokes theffmpegcommand-line utility viasubprocess.runto decode audio and video files. This is consistent with the tool's purpose of extracting audio data for visualizations. The command is constructed without a shell, which is a safe practice that prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The documentation in
references/effects.mdincludes HTML snippets that reference the GSAP library and TextPlugin from the JSDelivr content delivery network. These are standard, well-known references for web development and do not pose a security risk in this context. - [SAFE]: The core skill content consists of educational documentation and code examples for GSAP animations. The logic presented follows standard development practices for animations and deterministic rendering.
Audit Metadata