skills/openai/plugins/gsap/Gen Agent Trust Hub

gsap

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Shell Command Execution]: The script scripts/extract-audio-data.py uses subprocess.run() to invoke ffmpeg. This is a legitimate and standard use case for decoding audio/video files to extract frequency data for visualizers. The command construction uses a list format (not a raw shell string) and operates on user-provided input files, which is appropriate for a local utility script.
  • [Local Data Processing]: The skill documents techniques for loading JSON data for audio visualizers. It correctly advises against asynchronous fetching for its specific deterministic execution environment, recommending synchronous XHR or inlining for local data. While synchronous XHR is generally discouraged in standard web development, it is justified here by the specialized requirements of the target composition engine.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 08:04 AM