varg-video-edit-library
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download assets, templates, and code components from various established external platforms. These include NPM registries, JSDelivr for scripts, and GitHub repositories belonging to well-known organizations such as HeyGen, Remotion, and Magic UI.
- [DYNAMIC_EXECUTION]: New executable content is acquired at runtime using package managers (
npx,npm,pnpm) to integrate specific video editing modules and UI frameworks. These operations target recognized design libraries and vendor-specific resources, such as those hosted on the author's subdomains. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface by interpreting user-supplied requests for video edits (e.g., 'make the logo pop'). While it lacks explicit boundary markers in its instructions, the resulting operations are confined to intended media processing tasks.
- [COMMAND_EXECUTION]: The skill utilizes complex shell commands for FFmpeg filtering, video probing, and component installation. These commands are necessary for the skill's primary function and are documented as standard recipes for the agent to follow.
Audit Metadata