topview-skill
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Official Vendor Client. The skill is the official toolkit for Topview AI, provided by the verified author 'topviewai'. All operations (video/image generation, voice cloning, and background removal) are consistent with the service's primary purpose and use official vendor infrastructure.
- [SAFE]: Secure Credential Storage. The skill stores API keys and user IDs at
~/.topview/credentials.json. The implementation inscripts/auth.pyexplicitly sets file permissions to0600(owner read/write only), which is the industry standard for securing local secrets. - [SAFE]: Limited Network Scope. All network requests are directed to official vendor domains (
api.topview.ai,www.topview.ai,topview.ai). No data is sent to unknown or untrusted third-party servers. - [SAFE]: UX Optimization Context. Instructions to the agent to "skip terminal internals" or "summarize outcomes" are explicitly documented as style preferences for non-technical users in mobile chat environments. These instructions include mandatory exceptions that allow the agent to provide full technical details if requested by the user or if safety is a concern.
- [SAFE]: Standard Dependencies. The project relies on minimal and well-vetted libraries (
requests,python-dotenv) for its core functionality.
Audit Metadata