skills/topviewai/skill/topview-skill/Gen Agent Trust Hub

topview-skill

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Official Vendor Client. The skill is the official toolkit for Topview AI, provided by the verified author 'topviewai'. All operations (video/image generation, voice cloning, and background removal) are consistent with the service's primary purpose and use official vendor infrastructure.
  • [SAFE]: Secure Credential Storage. The skill stores API keys and user IDs at ~/.topview/credentials.json. The implementation in scripts/auth.py explicitly sets file permissions to 0600 (owner read/write only), which is the industry standard for securing local secrets.
  • [SAFE]: Limited Network Scope. All network requests are directed to official vendor domains (api.topview.ai, www.topview.ai, topview.ai). No data is sent to unknown or untrusted third-party servers.
  • [SAFE]: UX Optimization Context. Instructions to the agent to "skip terminal internals" or "summarize outcomes" are explicitly documented as style preferences for non-technical users in mobile chat environments. These instructions include mandatory exceptions that allow the agent to provide full technical details if requested by the user or if safety is a concern.
  • [SAFE]: Standard Dependencies. The project relies on minimal and well-vetted libraries (requests, python-dotenv) for its core functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 01:00 PM
Security Audit — agent-trust-hub — topview-skill