orca-transition-skill

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references Google Fonts (fonts.googleapis.com) for theme styling, which is a well-known and trusted service. It also defines dependencies on standard, reputable Node.js packages (gsap, playwright-core, and reveal.js) to be installed via npm.
  • [COMMAND_EXECUTION]: The scripts/capture.mjs utility executes the ffmpeg command-line tool using execFileSync with an argument array. This is a safe and standard implementation for the skill's stated purpose of encoding video frames.
  • [DATA_EXPOSURE]: The video capture script creates a temporary directory in the operating system's standard temp folder to store frame screenshots during the recording process. These temporary files are deleted upon completion, following standard development best practices.
  • [DYNAMIC_EXECUTION]: The skill uses playwright-core to programmatically interact with a browser instance to seek through animations and capture screenshots. This is the intended functional mechanism for the video recording feature and does not involve unsafe dynamic code generation from untrusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 09:34 AM