code-mv-render

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Node.js utility scripts (templates/export-video.mjs and templates/qa-stills.mjs) designed to automate video rendering. These scripts use node:child_process to spawn system browsers (Edge or Chrome) and ffmpeg for video encoding and verification. This behavior is standard and necessary for the skill's purpose as a video rendering engine.
  • [SAFE]: The skill strictly adheres to a deterministic rendering principle (frame = f(t)), which ensures that the output is solely dependent on a time parameter. This approach is documented as a best practice to avoid side effects from system clocks or external state during the rendering process.
  • [SAFE]: The documentation (references/motion-system.md and references/world-execute-spec.md) includes explicit safety checks for photosensitive epilepsy, referencing WCAG 2.3.1 guidelines and providing tools to calculate flash budgets in the generated videos.
  • [SAFE]: The skill provides clear licensing and compliance boundaries, explicitly warning users not to redistribute copyrighted audio or lyrics and providing guidance on how to manage external assets safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 10:20 AM