pan-3d-transition
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto interface withffmpeg,ffprobe, andnpx. All command arguments are passed as lists, which is a secure practice that prevents shell injection by avoiding the use of a shell interpreter to parse the command string. - [EXTERNAL_DOWNLOADS]: The documentation references
npm installfor setting up the Remotion environment. This is a standard dependency management step for the technology stack used and does not involve downloading scripts from untrusted or unverified sources. - [REMOTE_CODE_EXECUTION]: While the skill uses
npxto execute the Remotion renderer, this is the intended and standard mechanism for the stated goal of 3D video effect generation. There is no evidence of arbitrary or untrusted code being fetched or executed.
Audit Metadata