video-composition

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Node.js and Python scripts to automate project tasks.
  • scripts/bootstrap-project.mjs and scripts/review-project.mjs execute npx hyperframes for project initialization, linting, and verification.
  • Instructions in references/VOICE-AVATAR.md leverage ffmpeg and ffprobe for audio processing and duration measurement.
  • The skill integrates with platform-native okou CLI commands for media generation and cloud rendering.
  • [EXTERNAL_DOWNLOADS]: The skill references and installs established industry packages and vendor-specific tools.
  • It utilizes the hyperframes registry via npx for layout components.
  • scripts/prepare-content-font.py depends on the well-known fonttools and brotli Python libraries for webfont optimization.
  • All downloads and remote interactions are scoped to the primary functional purpose of video composition and utilize official or vendor-controlled sources.
  • [SAFE]: The skill exhibits high-quality coding practices.
  • File system operations in scripts/finalize-timing.mjs include explicit validation to prevent directory traversal attacks.
  • Sensitive identifiers like API keys and tokens are not hardcoded; instead, the skill uses standard placeholders for runtime injection.
  • The bundled assets/runtime/gsap.min.js is a standard, verified version of the GreenSock Animation Platform library.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 01:23 AM
Security Audit — agent-trust-hub — video-composition