dynamic-comic-video
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a Python script (
scripts/videogen.py) to interact with the AI Hive OpenAPI. All network requests are directed to the service domainai-hive.iclip.cnor authorized object storage URLs for media handling. - [DATA_EXFILTRATION]: The skill manages an API key stored in
~/.ai-hive/config.json. The script correctly implements security best practices by setting the file permissions to0600(read/write by owner only) to protect the stored credentials from unauthorized access by other users on the system. - [PROMPT_INJECTION]: The skill processes user-supplied creative prompts to generate videos through a remote API. Ingestion points: User input provided via the
--promptargument invideogen.py. Boundary markers: The prompt is encapsulated within a JSON object for API transmission. Capability inventory: The script is limited to API interaction and file downloads; it does not execute code based on model responses. Sanitization: Standard JSON serialization is used to prevent injection into the request structure. - [EXTERNAL_DOWNLOADS]: The skill requires the
requestslibrary, which is a standard and well-known Python package for HTTP operations. It does not download or execute arbitrary scripts from untrusted sources.
Audit Metadata