code-mv-render
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Node.js utility scripts (
templates/export-video.mjsandtemplates/qa-stills.mjs) designed to automate video rendering. These scripts usenode:child_processto spawn system browsers (Edge or Chrome) andffmpegfor video encoding and verification. This behavior is standard and necessary for the skill's purpose as a video rendering engine. - [SAFE]: The skill strictly adheres to a deterministic rendering principle (
frame = f(t)), which ensures that the output is solely dependent on a time parameter. This approach is documented as a best practice to avoid side effects from system clocks or external state during the rendering process. - [SAFE]: The documentation (
references/motion-system.mdandreferences/world-execute-spec.md) includes explicit safety checks for photosensitive epilepsy, referencing WCAG 2.3.1 guidelines and providing tools to calculate flash budgets in the generated videos. - [SAFE]: The skill provides clear licensing and compliance boundaries, explicitly warning users not to redistribute copyrighted audio or lyrics and providing guidance on how to manage external assets safely.
Audit Metadata