skills/chanjing-ai/chanjing-content-creation-skills/chanjing-content-creation-skill/Gen Agent Trust Hub
chanjing-content-creation-skill
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads generated media assets, including images, videos, and audio files, from the Chanjing platform's CDN (e.g., res.chanjing.cc) using the standard urllib library. These downloads are a core component of the skill's media creation workflow.\n- [COMMAND_EXECUTION]: Orchestration scripts within the skill utilize the subprocess module to invoke system utilities like ffmpeg and ffprobe for media processing. It also uses subprocess to run sibling Python scripts for task management. All commands are constructed using argument lists rather than shell strings, which effectively prevents command injection.\n- [SAFE]: Input validation is rigorously applied via extract_params.py and validate_step.py, which verify that user-supplied parameters match expected schemas and whitelists. Authentication tokens and API keys are stored locally in a .env file with permissions restricted via os.chmod(path, 0o600) to prevent unauthorized access.
Audit Metadata