Security audit
Security checks across malware telemetry and agentic risk
This skill is a straightforward AI video-generation helper that uses expected cloud providers, local files, and FFmpeg, with some privacy and hardening caveats.
Install this in a virtual environment, keep provider API keys scoped and private, monitor paid API usage, and avoid sending confidential prompts, scripts, images, audio, or videos unless the providers' data policies are acceptable. Keep FFmpeg and Python dependencies updated, and be careful with unusual image filenames and output paths because FFmpeg is invoked locally and selected outputs may be overwritten.
# Download image
img_path = self.output_dir / f"image_{int(time.time())}.png"
img_data = requests.get(image_url).content
with open(img_path, 'wb') as f:
f.write(img_data)# Download video
video_path = self.output_dir / f"video_{int(time.time())}.mp4"
video_data = requests.get(video_url).content
with open(video_path, 'wb') as f:
f.write(video_data)output_path
]
result = subprocess.run(cmd, capture_output=True, text=True)
if result.returncode != 0:
raise Exception(f"FFmpeg error: {result.stderr}")]
try:
result = subprocess.run(cmd, capture_output=True, text=True, check=True)
print(f"✅ Video created: {output_path}")
return output_path
except subprocess.CalledProcessError as e:openai>=1.0.0 replicate>=0.20.0 requests>=2.31.0 pillow>=10.0.0
openai>=1.0.0 replicate>=0.20.0 requests>=2.31.0 pillow>=10.0.0 python-dotenv>=1.0.0
openai>=1.0.0 replicate>=0.20.0 requests>=2.31.0 pillow>=10.0.0 python-dotenv>=1.0.0
openai>=1.0.0 replicate>=0.20.0 requests>=2.31.0 pillow>=10.0.0 python-dotenv>=1.0.0
replicate>=0.20.0 requests>=2.31.0 pillow>=10.0.0 python-dotenv>=1.0.0
66/66 vendors flagged this skill as clean.
No suspicious patterns detected.