rn-motion-replica
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (
scripts/analyze_reference.py) that perform video analysis usingffmpegandffprobe. These tools are executed via thesubprocessmodule using argument lists without a shell, which is the recommended secure implementation for such operations. - [EXTERNAL_DOWNLOADS]: The HTML template for motion replication fetches the GSAP animation library from the well-known jsdelivr CDN. It also references the HyperFrames framework from HeyGen's official GitHub repository, which is a recognized and well-known service in the AI video space.
- [REMOTE_CODE_EXECUTION]: The
package.jsonfile in the project templates usesnpxto execute thehyperframesCLI tool. This is a standard and expected method for running the rendering engine associated with the provided templates.
Audit Metadata