creating-video

Warn

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The scripts scripts/omni_generate.py and scripts/veo_generate.py attempt to dynamically install the requests library using os.system if it is not found in the environment. This involves executing an arbitrary shell command to modify the Python environment at runtime.
  • [COMMAND_EXECUTION]: The scripts/assemble.py script uses subprocess.run to execute ffmpeg and ffprobe binaries for video trimming, stitching, and metadata retrieval. This involves executing external processes with arguments derived from input parameters.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with Cloudflare's AI Gateway (gateway.ai.cloudflare.com) to send generation prompts and download resulting video files. While Cloudflare is a well-known service provider, this involves external network operations and data transfer.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 30, 2026, 08:56 PM
Security Audit — agent-trust-hub — creating-video