zynna-switch-actor
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages API authentication by accessing the
ZYNNA_SKILLS_API_KEYenvironment variable or a local configuration file at~/.zynna/credentials.json. This is standard behavior for specialized CLI-based agent tools. - [SAFE]: The skill performs network requests to the Zynna Open Skills API. It includes comprehensive redaction logic to ensure that sensitive data, such as bearer tokens and API keys, are stripped from logs and error messages before display.
- [SAFE]: The skill implements robust path validation to prevent directory traversal. All file operations for artifacts, logs, and results are confined to a designated subdirectory using absolute path resolution and prefix checking.
- [SAFE]: The execution workflow includes a confirmation prompt for the user before launching video transformation tasks, preventing unintentional or unauthorized credit consumption.
Audit Metadata