qwen-mm-plugins-edu-agent
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill employs several validation scripts (such as
check_circuit_closed.pyandcheck_render_overlap.py) that utilizesubprocess.runto executenode,ffmpeg, and internal helper scripts. These are used to drive a headless browser for pixel-perfect layout verification and audio processing, ensuring the quality of the generated tutorials. - [EXTERNAL_DOWNLOADS]: Fetches essential assets like the KaTeX math typesetting library from its official GitHub repository and the GSAP animation library from the npm registry. These downloads target well-known, trusted organizations and established package registries.
- [EXTERNAL_DOWNLOADS]: The voice generation script interacts with the Aliyun DashScope API (
dashscope.aliyuncs.com) to synthesize narration audio. This is a legitimate interaction with a well-known service provider associated with the skill's authoring context. - [COMMAND_EXECUTION]: Dynamically generates temporary JavaScript files to facilitate headless browser testing. These files are used as isolated drivers to measure rendered bounding boxes and detect visual overlaps, providing robust quality control before final video rendering.
Audit Metadata