sora

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
12
Flagged
12
Chunks
17
Flagged Files (12)
LICENSE.txtHIGH
78.3%

Malicious tool definition detected

Tool: LICENSE.txt [1/2] Description: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1.

Tool: LICENSE.txt [2/2] Description: this License.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: "sora" description: "Use when the user asks to generate, remix, poll, list, download, or delete Sora videos via OpenAI\u2019s video API using the bundled CLI (`scripts/sora.py`), including requests like \u201cgenerate AI video,\u201d \u201cSora,\u201d \u201cvideo remix,\u201d \u201cdownload video/thumbnail/spritesheet,\u201d and batch video generation; requires `OPENAI_API_KEY` and Sora API access." --- # Sora Video Generation Skill Creates or manages

Tool: SKILL.md [2/2] Description: locked-off for UI or on-screen text.

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface: display_name: "Sora Video Generation Skill"

references/cinematic-shots.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/cinematic-shots.md Description: # Cinematic shot templates Use these for filmic, mood-forward clips.

references/cli.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/cli.md [1/2] Description: # CLI reference (`scripts/sora.py`) This file contains the command catalog for the bundled video generation CLI.

Tool: references/cli.md [2/2] Description: openai python "$SORA_CLI" create-batch --input tmp/sora/prompts.jsonl --out-dir out --concurrency 3 # Cleanup (recommended) rm -f tmp/sora/prompts.jsonl ``` Notes: - `create-batch` writes one JSON response per job under `--out-dir`.

references/codex-network.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/codex-network.md Description: # Codex network approvals / sandbox notes This guidance is intentionally isolated from `SKILL.md` because it can vary by environment and may become stale.

references/prompting.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/prompting.md Description: # Prompting best practices (Sora) ## Contents - [Mindset & tradeoffs](#mindset--tradeoffs) - [API-controlled params](#api-controlled-params) - [Structure](#structure) - [Specificity](#specificity) - [Style & visual cues](#style--visual-cues) - [Camera & composition](#camera--composition) - [Motion & timing](#motion--timing) - [Lighting & palette](#lighting--palette) - [Character continuity](#character-continuity) - [Multi-shot prompts](#multi-shot-promp

references/sample-prompts.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sample-prompts.md Description: # Sample prompts (copy/paste) Use these as starting points.

references/social-ads.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/social-ads.md Description: # Social ad templates (4-8s) Short clips work best with clear beats.

references/troubleshooting.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/troubleshooting.md Description: # Troubleshooting ## Job fails with size or seconds errors - Cause: size not supported by model, or seconds not in 4/8/12.

references/video-api.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/video-api.md Description: # Sora Video API quick reference Keep this file short; the full docs live in the OpenAI platform docs.

scripts/sora.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/sora.py [1/3] Description: #!/usr/bin/env python3 """Create and manage Sora videos with the OpenAI Video API.

Tool: scripts/sora.py [2/3] Description: def _is_transient_error(exc: Exception) -> bool: if _is_rate_limit_error(exc): return True name = exc.__class__.__name__.lower() if "timeout" in name or "timedout" in name or "tempor" in name: return True msg = str(exc).lower() return "timeout" in msg or "timed out" in msg or "connection reset" in msg def _fields_from_args(args: argparse.Namespace) -> Dict[str, Optional[str]]: return { "use_case": getattr(args, "use_case", None), "scene": getattr(args, "s

Tool: scripts/sora.py [3/3]

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
12
Files Flagged
12
Chunks Analyzed
17
Analyzed
Feb 21, 2026, 02:50 PM
Security Audit — runlayer — sora