Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed educational video-generation workflow with external AI API use and local media processing, and I found no artifact-backed hidden exfiltration or destructive behavior.
Install only if you are comfortable providing Pruna and optionally Replicate credentials and sending generated prompts/media to those services. Keep outputs in a dedicated project directory, use the approval phases instead of skip flags, and consider pinning or updating Pillow before running the helper scripts.
if not crossfades or all(f <= 0 for f in crossfades):
list_file = output.parent / ".concat_list.txt"
list_file.write_text("\n".join(f"file '{p.resolve()}'" for p in clip_paths) + "\n")
subprocess.run(
[
ffmpeg,
"-y",body += f"\r\n--{boundary}--\r\n".encode("utf-8")
status, payload = api_request(
"POST",
"https://api.pruna.ai/v1/files",
headers={
"apikey": api_key,
"Content-Type": f"multipart/form-data; boundary={boundary}",def create_prediction(model: str, input_payload: dict, api_key: str) -> dict:
status, payload = api_request(
"POST",
"https://api.pruna.ai/v1/predictions",
headers={
"Content-Type": "application/json",
"apikey": api_key,).encode("utf-8") + path.read_bytes() + f"\r\n--{boundary}--\r\n".encode("utf-8")
status, payload = api_request(
"POST",
"https://api.replicate.com/v1/files",
headers={
"Authorization": f"Bearer {token}",
"Content-Type": f"multipart/form-data; boundary={boundary}",Pillow>=10.0.0
65/65 vendors flagged this skill as clean.
No suspicious patterns detected.