whiteboard-video-workflow
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/check_env.pyusessubprocess.runto execute a dependency setup script (setup_env.py) located in a related skill directory. This is used to ensure that necessary media libraries like OpenCV, NumPy, and PyAV are installed in the Python environment. - [EXTERNAL_DOWNLOADS]: The script
scripts/generate-image.pydownloads generated image assets from the RunningHub API (www.runninghub.cn). These downloads are directed to the user's project directory as part of the animation generation process. - [SAFE]: The skill demonstrates good security hygiene by instructing users to manage sensitive API keys via
.envfiles rather than hardcoding them. No signs of obfuscation, prompt injection, or unauthorized data exfiltration were detected.
Audit Metadata