avatar-talking-video

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/generate_video.py uses subprocess.run to execute a companion script from the voice-clone skill for speech synthesis. It passes user-provided text as a command-line argument to the Python interpreter.
  • [EXTERNAL_DOWNLOADS]: The skill downloads generated video files from Replicate's official infrastructure using urllib.request.urlretrieve in scripts/_common.py.
  • [SAFE]: The skill implements a shared configuration mechanism in scripts/_common.py that reads the Replicate API token from local or sibling skill directories (voice-clone, gpt-image-2, etc.), allowing for a unified user experience across related tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 01:40 AM