Security audit
Security checks across malware telemetry and agentic risk
This skill is a coherent media-generation workflow that discloses its paid APIs, local file outputs, and ffmpeg overwrite behavior.
Before installing, confirm you trust the prerequisite skill source and are comfortable using paid Pruna and Replicate APIs. Treat generated plan files and media as confidential if prompts or narration include private project details, and verify the output directory before assembly because ffmpeg can overwrite the final MP4.
## Pruna P-API (stills + optional motion)
- Base: `https://api.pruna.ai/v1/predictions`
- Upload: `https://api.pruna.ai/v1/files`
- Header: `apikey: ${PRUNA_API_KEY}`, `Model: p-image` | `p-image-edit` | `p-video`
- Body: `{ "input": { ... } }`## Pruna P-API (stills + optional motion)
- Base: `https://api.pruna.ai/v1/predictions`
- Upload: `https://api.pruna.ai/v1/files`
- Header: `apikey: ${PRUNA_API_KEY}`, `Model: p-image` | `p-image-edit` | `p-video`
- Body: `{ "input": { ... } }`## Replicate (audio)
- Header: `Authorization: Bearer ${REPLICATE_API_TOKEN}`
- Create: `POST https://api.replicate.com/v1/models/{owner}/{name}/predictions`
- Poll `urls.get` until `succeeded`; download output URL.
**Models in this workflow:**Before assembly:
> Assembly runs ffmpeg into `{out_dir}/story_reel.mp4`. ffmpeg uses **`-y`** and overwrites the output path without confirmation — confirm `{out_dir}` is correct.
## Phases (agent)Before assembly:
> Assembly runs ffmpeg into `{out_dir}/story_reel.mp4`. ffmpeg uses **`-y`** and overwrites the output path without confirmation — confirm `{out_dir}` is correct.
## Phases (agent)63/63 vendors flagged this skill as clean.
No suspicious patterns detected.