editorial-collage-motion
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.run()withinscripts/render_assembly.pyandscripts/validate_collage.pyto execute FFmpeg and ffprobe for video generation and metadata extraction. These scripts implement a safety mechanism namedinside()andsafe_asset()that usespath.relative_toto verify all file operations remain within the project directory, effectively preventing path traversal. Furthermore, the scripts cast all user-controllable numeric parameters from JSON configuration files to float or integer types before including them in FFmpeg command arguments or filter expressions. - [SAFE]: The skill does not contain any suspicious patterns related to data exfiltration, credential theft, or code obfuscation. Its primary functions are transparent and utilize well-known platform capabilities and local utilities.
Audit Metadata