Security audit
Security checks for vulnerabilities and agentic risk
The skill plans video visuals and limits further editing to the user's requested scope.
Keep a project backup because the workflow writes project annotations and can perform requested edits. Before requesting full production, review cloud costs and data handling. Cloud credentials are optional for cloud steps; the external CLI itself was not audited here.
The supplied commands modify existing clips through gtrk patch move and trim. They do not perform the declared split workflow, assign visual layers, or produce dispatch queues. These editing operations are materially different from the stated planning and dispatch purpose, which explicitly defers subsequent timeline assembly.
The FILM_BROLL instructions explicitly require English scene descriptions for queries and Chinese text for exclude fields. This language requirement is reinforced at lines 173 and 304, but the skill neither offers a language choice nor explains a technical need for these restrictions.
