Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The scripts are truncated in the review excerpt, so full runtime behavior cannot be audited; however, visible code uses safe argument lists and no obvious destructive or exfiltration patterns.
• imagegen.py and videogen.py appear to be near-duplicate implementations; this increases maintenance risk and potential divergence.
• The workflow relies on an external commercial API with a placeholder key; no test or sandbox mode is defined, so users must be careful with billed operations.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• GitHub adoption: 2 GitHub stars
• Stars/forks activity: 2 stars, 1 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The scripts are truncated in the review excerpt, so full runtime behavior cannot be audited; however, visible code uses safe argument lists and no obvious destructive or exfiltration patterns.
• imagegen.py and videogen.py appear to be near-duplicate implementations; this increases maintenance risk and potential divergence.
• The workflow relies on an external commercial API with a placeholder key; no test or sandbox mode is defined, so users must be careful with billed operations.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• GitHub adoption: 2 GitHub stars
• Stars/forks activity: 2 stars, 1 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The scripts are truncated in the review excerpt, so full runtime behavior cannot be audited; however, visible code uses safe argument lists and no obvious destructive or exfiltration patterns.
• imagegen.py and videogen.py appear to be near-duplicate implementations; this increases maintenance risk and potential divergence.
• The workflow relies on an external commercial API with a placeholder key; no test or sandbox mode is defined, so users must be careful with billed operations.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• GitHub adoption: 2 GitHub stars
• Stars/forks activity: 2 stars, 1 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The scripts are truncated in the review excerpt, so full runtime behavior cannot be audited; however, visible code uses safe argument lists and no obvious destructive or exfiltration patterns.
• imagegen.py and videogen.py appear to be near-duplicate implementations; this increases maintenance risk and potential divergence.
• The workflow relies on an external commercial API with a placeholder key; no test or sandbox mode is defined, so users must be careful with billed operations.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• GitHub adoption: 2 GitHub stars
• Stars/forks activity: 2 stars, 1 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.