pan-3d-transition

Pass

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to interface with ffmpeg, ffprobe, and npx. All command arguments are passed as lists, which is a secure practice that prevents shell injection by avoiding the use of a shell interpreter to parse the command string.
  • [EXTERNAL_DOWNLOADS]: The documentation references npm install for setting up the Remotion environment. This is a standard dependency management step for the technology stack used and does not involve downloading scripts from untrusted or unverified sources.
  • [REMOTE_CODE_EXECUTION]: While the skill uses npx to execute the Remotion renderer, this is the intended and standard mechanism for the stated goal of 3D video effect generation. There is no evidence of arbitrary or untrusted code being fetched or executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 27, 2026, 12:41 AM
Security Audit — agent-trust-hub — pan-3d-transition