Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently creates product videos from public URLs or repositories, with expected network, file-output, and rendering behavior.
Install only if you are comfortable giving it public project URLs and letting it make network requests to the site, GitHub, and Google-hosted font files. Use an empty output directory, review generated files before sharing, and pin dependencies more tightly if you need strict reproducibility.
If the skill primarily performs filesystem bootstrapping and template copying while claiming to inspect sites and create finished media, users may overtrust it with repositories, URLs, or output expectations it cannot safely satisfy. Security-wise, misleading descriptions obscure the true effect of file operations and can mask unexpected writes or setup steps that should be separately reviewed.
If the skill primarily performs filesystem bootstrapping and template copying while claiming to inspect sites and create finished media, users may overtrust it with repositories, URLs, or output expectations it cannot safely satisfy. Security-wise, misleading descriptions obscure the true effect of file operations and can mask unexpected writes or setup steps that should be separately reviewed.
If the skill primarily performs filesystem bootstrapping and template copying while claiming to inspect sites and create finished media, users may overtrust it with repositories, URLs, or output expectations it cannot safely satisfy. Security-wise, misleading descriptions obscure the true effect of file operations and can mask unexpected writes or setup steps that should be separately reviewed.
If the skill primarily performs filesystem bootstrapping and template copying while claiming to inspect sites and create finished media, users may overtrust it with repositories, URLs, or output expectations it cannot safely satisfy. Security-wise, misleading descriptions obscure the true effect of file operations and can mask unexpected writes or setup steps that should be separately reviewed.
The skill instructs the agent to use network access, shell commands, and file read/write operations, but it declares no explicit tool scope or permission boundaries. That creates an overbroad execution surface where a caller or downstream runtime may permit powerful actions without clear constraints, increasing the chance of unintended network access, filesystem modification, or command execution.
The skill metadata uses broad, generic phrasing like 'Turn a project link into a choreographed motion film' and a default prompt that activates on a wide range of requests involving project URLs, videos, explainers, or animated stories. Combined with allow_implicit_invocation: true, this increases the chance the agent is invoked when the user did not explicitly intend to run this skill, which can trigger unintended external inspection of websites or repositories and unnecessary downstream actions.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
parts=[p for p in parsed.path.split('/') if p]
if len(parts)<2:raise ValueError('Provide a GitHub repository URL, not just a user profile')
owner,repo=parts[:2];output['source_type']='github_repository'
api=f'https://api.github.com/repos/{owner}/{repo}'
body,final=get(api);data=json.loads(body)
output.update({'redirected_url':final,'name':data.get('name'),'description':data.get('description'),
'homepage':data.get('homepage'),'default_branch':data.get('default_branch'),
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
parts=[p for p in parsed.path.split('/') if p]
if len(parts)<2:raise ValueError('Provide a GitHub repository URL, not just a user profile')
owner,repo=parts[:2];output['source_type']='github_repository'
api=f'https://api.github.com/repos/{owner}/{repo}'
body,final=get(api);data=json.loads(body)
output.update({'redirected_url':final,'name':data.get('name'),'description':data.get('description'),
'homepage':data.get('homepage'),'default_branch':data.get('default_branch'),
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
with wave.open(str(OUT/'sound-design.wav'),'wb') as w:
w.setnchannels(2);w.setsampwidth(2);w.setframerate(sr);w.writeframes((np.clip(a,-1,1)*32767).astype('<i2').tobytes())
normalized=OUT/'sound-normalized.wav'
subprocess.run(['ffmpeg','-y','-v','error','-i',str(OUT/'sound-design.wav'),'-af','loudnorm=I=-18:TP=-1.5:LRA=9','-ar','48000',str(normalized)],check=True)
normalized.replace(OUT/'sound-design.wav')
def main():
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
name=''.join(ch.lower() if ch.isalnum() else '-' for ch in b('brand','name')).strip('-')
output=OUT/f'{name}-bravado.mp4'
cmd=['ffmpeg','-y','-v','error','-f','rawvideo','-pix_fmt','rgb24','-s',f'{W}x{H}','-r',str(FPS),'-i','-', '-i',str(OUT/'sound-design.wav'),'-c:v','libx264','-preset','fast','-crf','18','-pix_fmt','yuv420p','-c:a','aac','-b:a','192k','-movflags','+faststart','-t',str(DURATION),str(output)]
p=subprocess.Popen(cmd,stdin=subprocess.PIPE)
for i in range(FPS*DURATION):
p.stdin.write(frame(i/FPS).tobytes())
if i%150==0:print(f'Rendered {i}/{FPS*DURATION} frames',flush=True)
The skill tells the agent to inspect external websites and GitHub repositories but does not warn that this involves network access and potential transmission of request metadata to third parties. In a skill centered on analyzing public URLs this is contextually expected, which lowers severity, but users still deserve clear notice because even public-link retrieval can have privacy and compliance implications.
Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.
Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.
No suspicious patterns detected.