pdf2video
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/assemble_video.pyinvokes theffmpegutility using thesubprocess.runmethod. The command is constructed as a list of arguments, and numerical parameters such as silence durations are explicitly cast tofloatorintbefore being interpolated into filter strings, which prevents command injection. - [EXTERNAL_DOWNLOADS]: The
scripts/synth_audio.pyscript communicates with the Minimax TTS API (api.minimaxi.com) to generate audio from text. This interaction is essential for the skill's primary function and utilizes theMINIMAX_API_KEYenvironment variable for secure authentication. - [DATA_EXPOSURE]: The skill reads local project files, specifically slide images and narration markdown files, to generate the output video. This access is scoped to the provided course directory and is documented as part of the skill's standard workflow.
Audit Metadata