music-to-video

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard command-line tools to process media files and manage the project lifecycle:\n
  • Invokes ffmpeg via Python to decode and standardize input audio files for analysis.\n
  • Uses python3 to run a specialized beat analyzer script that outputs musical timing metadata.\n
  • Executes several Node.js scripts for project assembly, plan validation, and asset organization.\n
  • Utilizes the npx hyperframes utility for project linting, validation in a headless browser, and final MP4 rendering.\n- [EXTERNAL_DOWNLOADS]: The workflow relies on standard external resources from reputable registries and CDNs:\n
  • Installs common audio processing libraries (librosa, numpy, soundfile) from PyPI.\n
  • Loads widely-used animation and rendering libraries (GSAP, Three.js) from the cdn.jsdelivr.net CDN for use within generated compositions.\n
  • Fetches and executes the hyperframes CLI tool from the public NPM registry.\n- [DYNAMIC_EXECUTION]: The skill uses a sub-agent to programmatically generate code as part of its primary function:\n
  • Dynamically creates frame composition files (.html) containing CSS and JavaScript based on approved storyboards.\n
  • These generated files are executed in a browser environment during the verification and rendering steps, which is the standard mechanism for this video framework.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 07:58 AM