happy-horse-image-to-video

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads generated video and image assets from the AI Hive API to a local directory (~/Downloads/AiHive). These downloads are the intended output of the video generation process.
  • [COMMAND_EXECUTION]: The skill is implemented as a Python script (videogen.py) that the user is instructed to execute. The script performs legitimate tasks such as file system management for outputs and network communication with the service API.
  • [CREDENTIALS_UNSAFE]: The skill manages an API key (sk-api-*) required to authenticate with the AI Hive service. It stores this key in a local configuration file (~/.ai-hive/config.json) and proactively sets the file permissions to 0600 (read/write only by the owner) to protect the secret from other users on the system.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 12:20 PM
Security Audit — agent-trust-hub — happy-horse-image-to-video