video-creator
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system-level commands to process media files and generate videos.
- Evidence:
scripts/video_maker.pyandscripts/verify_alignment.pyutilize thesubprocess.runmodule to callffmpegandffprobe. - Context: Commands are constructed using argument lists rather than shell strings, which is a standard security practice to prevent shell injection vulnerabilities.
- [EXTERNAL_DOWNLOADS]: The skill requires several external tools and libraries to function.
- Evidence: The
README.mdandSKILL.mdspecify dependencies onffmpeg,edge-tts, andpyyaml. - Context: These are widely recognized and trusted open-source utilities and libraries. The
edge-ttspackage communicates with official Microsoft Edge TTS services, which is the intended purpose of the skill. - [DATA_EXPOSURE]: The skill processes project-specific configuration and assets.
- Evidence: Scripts read
narration.json,video_config.yaml, and user-generated images/audio within theassets/generated/workspace. - Context: File access is confined to the local project environment, with no evidence of accessing sensitive system paths (e.g., SSH keys) or unauthorized network exfiltration.
Audit Metadata