sn-motion-html
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses subprocess calls to execute ffmpeg and ffprobe for video processing and validation. These calls are well-defined and essential for the skill's purpose.
- [EXTERNAL_DOWNLOADS]: The skill downloads media assets from Volcengine's Ark API. This is a legitimate integration with a well-known service.
- [SAFE]: The project includes security-conscious features like blocking access to .env files in the local server and using HTML escaping in the frontend.
- [SAFE]: The skill implements strict file permission management, such as setting project-local .env files to owner-only access (0o600) during initialization.
Audit Metadata