music-to-video — security audits

Passed all audits

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  The skill is a complex and professional music-to-video generation tool. It includes robust security measures such as SVG sanitization to prevent XSS. The primary security finding is an instruction to the AI agent to run an update command without user confirmation, which is a minor autonomy concern. It also performs standard runtime dependency installations.

  Risk: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONJul 28, 2026Full report

• Socket

  pass

  No alerts

  Jul 28, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWJul 28, 2026Full report