gsap
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Shell Command Execution]: The script
scripts/extract-audio-data.pyusessubprocess.run()to invokeffmpeg. This is a legitimate and standard use case for decoding audio/video files to extract frequency data for visualizers. The command construction uses a list format (not a raw shell string) and operates on user-provided input files, which is appropriate for a local utility script. - [Local Data Processing]: The skill documents techniques for loading JSON data for audio visualizers. It correctly advises against asynchronous fetching for its specific deterministic execution environment, recommending synchronous XHR or inlining for local data. While synchronous XHR is generally discouraged in standard web development, it is justified here by the specialized requirements of the target composition engine.
Audit Metadata