product-launch-video — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  Th e product-launch-video skill i s a sophisticated workfl ow for creating promotion al videos from URLs or scr ipts. It utilizes a suite of Node.js scripts and th e hyperframes CLI tool to orchestrate asset capture , design system applicati on, storyboarding, audio g eneration, and final rende ring. The skill demonstrat es best practices such as attribute sanitization in generated HTML and clear separation of concerns bet ween the orchestrator and sub-agents. It relies on standard tools (ffmpeg, f fprobe) and well-known CD Ns (GSAP). No malicious ac tivity or security risks w ere identified.

  Risk: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONJul 29, 2026Full report

• Socket

  warn

  1 alert: gptAnomaly

  Jul 29, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · 1 issue

  Risk: MEDIUMJul 29, 2026Full report