video-creator

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts video_maker.py and verify_alignment.py utilize subprocess.run() to invoke ffmpeg and ffprobe. These external commands are safely called using lists of arguments without shell invocation (shell=True is not used), preventing shell injection vulnerabilities.
  • [INDIRECT_PROMPT_INJECTION]: The tool ingests user-supplied text narration and configurations to generate voiceovers and image prompts. While this represents a standard text-processing surface typical for creative AI utilities, inputs are cleanly passed to APIs and automated pipelines without executing unexpected logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 06:23 AM
Security Audit — agent-trust-hub — video-creator