promo-video
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads royalty-free background music from well-known and trusted services like Bensound and Pixabay. These operations are transparently documented and consistent with the skill's primary purpose of video production.
- [COMMAND_EXECUTION]: Uses standard multimedia tools (ffmpeg, ffprobe) and package managers (npm, pip) to process audio/video and manage dependencies. These commands are executed within the context of the video creation workflow.
- [REMOTE_CODE_EXECUTION]: The Python script
generate_voiceover.pyinteracts with the ElevenLabs API to generate audio files. While it usesurllib.requestandsubprocessto manage these assets, the behavior is localized to the expected functionality of the skill and targets a reputable service. - [CREDENTIALS_UNSAFE]: The skill requires an
ELEVEN_LABS_API_KEYto function. It correctly instructs the user to set this as an environment variable rather than hardcoding it, following security best practices for secret management. - [DATA_EXFILTRATION]: Network activity is restricted to fetching assets from trusted media providers and sending script text to the ElevenLabs API for synthesis. No sensitive local data is targeted for exfiltration.
Audit Metadata