remotion-video
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The Python scripts (
generate_audio_edge.py,generate_audio_minimax.py, andgenerate_audio_qwen.py) usesubprocess.runto callffprobeandffmpeg. These calls are used to extract audio duration and convert audio formats, which are standard operations for a video/audio generation skill. - [CREDENTIALS_UNSAFE] (SAFE): The
generate_audio_minimax.pyscript retrieves sensitive API keys from environment variables (MINIMAX_API_KEY) rather than hardcoding them in the source code, adhering to security best practices. - [DYNAMIC_EXECUTION] (LOW): The scripts programmatically generate and overwrite the
src/audioConfig.tsfile. This is used to synchronize the generated audio metadata with the React-based Remotion framework. While this is a form of code generation, it is restricted to a configuration file and is a core intended functionality of the skill.
Audit Metadata