Skills
skills/varnan-tech/opendirectory/vid-product-launch/Gen Agent Trust Hub

vid-product-launch

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands within export-video.sh to manage the video production pipeline.
  • Invokes ffmpeg to synthesize audio effects and assemble the final MP4 video.
  • Executes node to run internal scripts for frame capture and metadata extraction.
  • [EXTERNAL_DOWNLOADS]: The export script automates the installation of required rendering tools from well-known registries.
  • Installs the playwright package from the official NPM registry.
  • Downloads the Chromium browser binary for headless frame rendering.
  • [REMOTE_CODE_EXECUTION]: The skill performs local dynamic execution to parse animation data.
  • The extract-sfx.mjs utility uses new Function() to evaluate a JavaScript array containing sound effect timing extracted from the HTML source generated by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 06:04 PM
Security Audit — agent-trust-hub — vid-product-launch