varg-video-generation

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes bunx vargai for initializing projects and rendering video content. These commands are standard for interacting with the vendor's CLI tool.
  • [CREDENTIALS_UNSAFE]: The setup script interactively prompts the user for a FAL_API_KEY and manages several optional API keys (ElevenLabs, Replicate, Groq) by storing them in a local .env file. To mitigate risk, the script automatically adds .env to the .gitignore file to prevent accidental credential leakage to version control.
  • [EXTERNAL_DOWNLOADS]: The skill references the vargai package and directs users to official AI service providers (fal.ai, elevenlabs.io, replicate.com) for necessary API keys.
  • [SAFE]: File system operations are localized to the current working directory for project scaffolding, such as creating output, .cache, and examples directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 12:19 PM