sn-code-video
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes system utilities such as
ffmpegandffprobethrough shell scripts and Python'ssubprocess.run. These operations are essential for video encoding, audio synthesis, and technical verification of the output files. The commands use fixed argument arrays rather than raw shell strings, which is a safe practice. - [EXTERNAL_DOWNLOADS]: The skill requires network access for
edge-tts(Microsoft speech platform) andfaster-whisper(Hugging Face for model weights). These are documented dependencies on well-known services and do not involve executing untrusted remote code. - [DYNAMIC_EXECUTION]: The
capture.mjsscript utilizes Playwright or Puppeteer to automate a headless browser, employingpage.evaluateto trigger frame rendering within the browser context. This is a standard and necessary pattern for its stated purpose of capturing programmatically generated images. - [COMMAND_EXECUTION]: Shell scripts (
audio_check.sh,check_video.sh) execute embedded Python code using heredocs. This code performs internal validation of the video's technical specifications and is not generated from untrusted inputs.
Audit Metadata