reel-editor

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: Multiple scripts, including cut.py, render.sh, and doctor.sh, execute shell commands to orchestrate video editing. This involves invoking ffmpeg for video manipulation, node for timeline calculations, and npx for executing platform-specific rendering tools.
  • [DYNAMIC_EXECUTION]: The capcut_draft.py script performs dynamic module loading by modifying sys.path based on the user-provided CAPCUT_SKILLS_DIR environment variable. This enables optional integration with external CapCut helper scripts provided by the user.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the gsap library from a public CDN, verifying its integrity with a SHA-256 checksum. It also uses npx to retrieve the hyperframes package from the heygen-com organization. These dependencies are standard for the skill's animation and rendering pipeline.
  • [DATA_EXFILTRATION]: The skill reads an ElevenLabs API key from a local configuration file (~/.config/reels/.env) and transmits audio data to ElevenLabs' API for transcription. This behavior is documented and necessary for high-quality caption synchronization.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 10:40 PM