produce-game-2d-sprites

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/video2dsprite.py invokes the ffmpeg binary using subprocess.run to extract frames from video files. This execution is performed using a list of arguments rather than a shell string, which is a secure practice that prevents shell injection. This functionality is essential for the skill's primary purpose of video-to-sprite conversion.
  • [SAFE]: The skill performs image and video manipulation using well-established libraries like Pillow and NumPy. All operations are localized to the user's project directory; there are no network requests, attempts to access sensitive system files, or persistent mechanisms detected. The instructions provided for the AI agent are focused on artistic consistency and technical quality control for game development.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 03:31 AM
Security Audit — agent-trust-hub — produce-game-2d-sprites