flower-transitions

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/gen.py executes the ffmpeg command-line utility via the subprocess module to render video overlays. It uses argument lists rather than shell strings, which effectively prevents shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill requires the numpy library and downloads video assets from the platform using curl. These operations are standard for the skill's video processing functionality and use expected sources.
  • [COMMAND_EXECUTION]: The rendering script validates input environment variables by converting them to integers and uses hardcoded variants, ensuring that command execution remains within safe bounds.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 04:33 PM