Video Generation
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The script imports and uses
z-ai-web-dev-sdk. This is a standard dependency for the skill's primary purpose of video generation. No unauthorized or risky downloads were identified. - [DATA_EXFILTRATION] (SAFE): No access to sensitive local files (e.g., SSH keys, environment variables) or unauthorized network calls were found. The network activity is limited to the SDK's internal API communication.
- [PROMPT_INJECTION] (SAFE): The prompt used for video generation ("A cat is playing with a ball.") is hardcoded in the script, preventing any risk of external prompt injection via this tool.
- [COMMAND_EXECUTION] (SAFE): The script does not utilize
eval(),exec(), or any subprocess modules to run system commands.
Audit Metadata