flower-transitions
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/gen.pyexecutes theffmpegcommand-line utility via thesubprocessmodule to render video overlays. It uses argument lists rather than shell strings, which effectively prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill requires the
numpylibrary and downloads video assets from the platform usingcurl. These operations are standard for the skill's video processing functionality and use expected sources. - [COMMAND_EXECUTION]: The rendering script validates input environment variables by converting them to integers and uses hardcoded variants, ensuring that command execution remains within safe bounds.
Audit Metadata