summarize-video-releases
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates video production through local Node.js scripts (
compose-video.js,render-video.js) and launches a headless browser via Playwright to perform frame capture. These are legitimate operations required for automated media rendering within a development environment. - [EXTERNAL_DOWNLOADS]: The rendering template fetches verified UI components and typography from the well-known
cdn.jsdelivr.netservice. These references are restricted to specific vendor packages and use pinned versions to ensure build consistency and security. - [SAFE]: The skill implements robust file system protections in
asset-path.js, usingrealpathSyncand relative path verification to ensure that the internal static server only serves files from authorized project subdirectories, effectively preventing directory traversal attacks.
Audit Metadata