Media
Warn
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Multiple scripts within the skill utilize subprocesses to perform media operations.
Art/Tools/ComposeThumbnail.tsspawns themagick(ImageMagick) binary to composite images.Art/Tools/Generate.tsexecutesmagick,cwebp, andrmfor image optimization and cleanup.Remotion/Tools/Render.tsuses the Bun shell utility$to executenpx remotionandnpx create-videocommands.- [COMMAND_EXECUTION]: The skill implements a mandatory notification system that forces the agent to executecurlrequests tohttp://localhost:8888/notifyat the beginning of most workflows. This patterns assumes a specific local service is present and allows for arbitrary message transmission to a local endpoint.- [REMOTE_CODE_EXECUTION]: TheRemotion/Tools/Render.tsscript includes functionality to create new projects usingnpx create-video@latest. This command downloads and executes a remote script from the npm registry at runtime.- [REMOTE_CODE_EXECUTION]: TheContentToAnimation.mdworkflow describes a process where the agent extracts content from untrusted sources (such as YouTube transcripts, PDFs, and web articles via the Parser skill), generates React components containing this data, and subsequently executesnpm installandnpx remotion render. This represents a dynamic code generation pipeline where external input influences generated source code that is then executed in the local environment.- [EXTERNAL_DOWNLOADS]: The skill interacts with several well-known third-party services for its core functionality, including the Replicate API (for Flux and Nano Banana models), OpenAI API (for GPT-image-1), Google GenAI API (for Gemini/Nano Banana Pro), remove.bg API (for background removal), and the Discord API (for Midjourney integration via a bot).- [CREDENTIALS_UNSAFE]: The image generation scripts (Generate.tsandGenerateMidjourneyImage.ts) are designed to read sensitive API keys from a local environment file (.env) located in user-controlled configuration directories (~/.claude/or~/.config/PAI/). While intended for local infrastructure, this involves regular access to a centralized secret store.
Audit Metadata