fisheye-motion
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires cloning a repository from GitHub (
https://github.com/vibe-motion/fisheye-motion.git) to access the rendering engine. As this is the skill author's own official repository for the tool's core logic, it is a standard deployment mechanism. - [COMMAND_EXECUTION]: Instructions involve standard development commands (
git clone,npm install,pnpm run dev,ffmpeg) for setting up the environment and rendering video output. These are necessary for the skill's primary purpose of video processing and do not include suspicious or high-privilege operations. - [REMOTE_CODE_EXECUTION]: The workflow relies on executing code from the cloned repository. Since this code belongs to the verified vendor and is the primary implementation of the requested effect, it represents normal functionality.
Audit Metadata