varg-video-generation
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
bunx vargaifor initializing projects and rendering video content. These commands are standard for interacting with the vendor's CLI tool. - [CREDENTIALS_UNSAFE]: The setup script interactively prompts the user for a
FAL_API_KEYand manages several optional API keys (ElevenLabs, Replicate, Groq) by storing them in a local.envfile. To mitigate risk, the script automatically adds.envto the.gitignorefile to prevent accidental credential leakage to version control. - [EXTERNAL_DOWNLOADS]: The skill references the
vargaipackage and directs users to official AI service providers (fal.ai, elevenlabs.io, replicate.com) for necessary API keys. - [SAFE]: File system operations are localized to the current working directory for project scaffolding, such as creating
output,.cache, andexamplesdirectories.
Audit Metadata