pdf2video

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/assemble_video.py invokes the ffmpeg utility using the subprocess.run method. The command is constructed as a list of arguments, and numerical parameters such as silence durations are explicitly cast to float or int before being interpolated into filter strings, which prevents command injection.
  • [EXTERNAL_DOWNLOADS]: The scripts/synth_audio.py script communicates with the Minimax TTS API (api.minimaxi.com) to generate audio from text. This interaction is essential for the skill's primary function and utilizes the MINIMAX_API_KEY environment variable for secure authentication.
  • [DATA_EXPOSURE]: The skill reads local project files, specifically slide images and narration markdown files, to generate the output video. This access is scoped to the provided course directory and is documented as part of the skill's standard workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 07:36 AM