video-composition
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Node.js and Python scripts to automate project tasks.
scripts/bootstrap-project.mjsandscripts/review-project.mjsexecutenpx hyperframesfor project initialization, linting, and verification.- Instructions in
references/VOICE-AVATAR.mdleverageffmpegandffprobefor audio processing and duration measurement. - The skill integrates with platform-native
okouCLI commands for media generation and cloud rendering. - [EXTERNAL_DOWNLOADS]: The skill references and installs established industry packages and vendor-specific tools.
- It utilizes the
hyperframesregistry vianpxfor layout components. scripts/prepare-content-font.pydepends on the well-knownfonttoolsandbrotliPython libraries for webfont optimization.- All downloads and remote interactions are scoped to the primary functional purpose of video composition and utilize official or vendor-controlled sources.
- [SAFE]: The skill exhibits high-quality coding practices.
- File system operations in
scripts/finalize-timing.mjsinclude explicit validation to prevent directory traversal attacks. - Sensitive identifiers like API keys and tokens are not hardcoded; instead, the skill uses standard placeholders for runtime injection.
- The bundled
assets/runtime/gsap.min.jsis a standard, verified version of the GreenSock Animation Platform library.
Audit Metadata