short-video-script-to-finished-video
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads generated video/image results from AI Hive's content delivery network (CDN) URLs provided by their API. These are routine operations for a media generation skill.
- [COMMAND_EXECUTION]: The skill involves executing a local Python script (
videogen.py) for video generation tasks. It uses standard subprocess-like patterns for CLI arguments but does not execute arbitrary shell commands or untrusted code. - [CREDENTIALS_SAFE]: The skill manages API keys by storing them in
~/.ai-hive/config.jsonwith restricted file permissions (0600), which is a standard security best practice for CLI tools. - [DATA_EXFILTRATION]: The script uploads user-provided media files (images, videos, audio) to the official AI Hive API and its associated Object Storage Service (OSS) for processing. These operations are limited to the vendor's infrastructure as described in the skill's purpose.
Audit Metadata