videoagent-video-studio Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill relies on a hosted proxy for video generation, which means user prompts and images are sent to a third-party service. This may raise privacy concerns for sensitive use cases.
• The proxy code is included but not fully documented; the actual generate.js script is referenced but not shown in the excerpt, so its behavior is not fully verified.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.