Skip to content
skillsafebeta
← Report library
Purpose / Writing

Video Skill Security Audit

What the author says it does (original text)

When the user wants to create, generate, or produce video content using AI tools or programmatic frameworks. Also use when the user mentions 'video production,' 'AI video,' 'Remotion,' 'Hyperframes,' 'HeyGen,' 'Synthesia,' 'Veo,' 'Sora,' 'Runway,' 'Kling,' 'Seedance,' 'Hailuo,' 'MiniMax,' 'Pika,' 'Hunyuan,' 'Wan,' 'video generation,' 'AI avatar,' 'talking head video,' 'programmatic video,' 'video

Independent security check

Do not install or run it yet

Files checked
4
Risks found
5
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.Risks found: 1
Medium risk

The latest npm scaffold can execute unpinned third-party code locally

Source references: 2
What we found

`npx create-video@latest` downloads and executes whichever release is current rather than a reviewed, pinned version. `npm install hyperframes` may also run dependency installation scripts.

Why this matters

If a package, dependency, or publisher account is compromised, installation could read project files or credentials, modify the workspace, or run other local commands. The evidence shows the commands are recommended; it does not show that an attack occurred.

Both commands lack reproducible version pins, and `npx ...@latest` explicitly runs the newest scaffolder. The source does not show malicious package code or any particular lifecycle script; the risk is trusting third-party code resolved from npm at execution time. Users can disallow automatic execution and require reviewed, pinned versions.

SKILL.md:58In the instructionsOpen original file
```bashnpm install hyperframes```
Show 1 other places
SKILL.md:87In the instructionsOpen original file
```bashnpx create-video@latest```
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
High risk

Creating a digital twin gives a third party face and voice samples usable for impersonation

Source references: 2
What we found

The guide explicitly recommends uploading a 2–5 minute recording so HeyGen can create a digital twin that “looks and sounds like you,” and it permits direct agent generation through MCP. This material contains persistent, highly sensitive biometric and voice data.

Why this matters

The provider receives footage sufficient to generate the user's likeness and voice. Weak retention, authorization, or account controls could enable later generation without consent, impersonation, or lasting privacy loss.

The guide says agents can generate videos directly through HeyGen and suggests uploading 2–5 minutes of personal video to create a twin that “looks and sounds like you.” If chosen, face, voice, and impersonation-capable material goes to a third party; the source gives no retention, deletion, or generation-authorization controls. Users can require disclosure of data policies and explicit approval for each avatar creation or use.

SKILL.md:189In the instructionsOpen original file
**Agent integration:** HeyGen has an official MCP server — AI agents can generate avatar videos directly.
Show 1 other places
SKILL.md:201In the instructionsOpen original file
**Custom avatars:** Upload a 2-5 min video of yourself to create a digital twin. Looks and sounds like you, generates videos from text scripts.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Low risk

The install command does not pin a dependency version

Source references: 3
What we found

The installation command does not specify dependency versions. The same command may download different code later, so what you install can differ from what was checked.

Why this matters

A later install may download different code even though the command and this report have not changed.

This is an actionable installation command with no Hyperframes version specified. Running it at different times may resolve to different package code. A user can ask the author for a tested exact version and lockfile, and inspect the dependency in a restricted environment first.

The command explicitly selects `latest`, so execution fetches and runs whichever scaffolder is current then, rather than a version fixed at audit time. The risk arises only if the user or agent runs it. A user can require an exact version and verify the package, publisher, and contents first.

SKILL.md:59In the instructionsOpen original file
```bashnpm install hyperframes```
Show 2 other places
SKILL.md:88In the instructionsOpen original file
```bashnpx create-video@latest```
SKILL.md:87In the instructionsOpen original file
```bashnpx create-video@latest```
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.Risks found: 1
Medium risk

Project marketing files are consumed as agent context without prompt-injection isolation

Source references: 1
What we found

The Skill tells the agent to automatically locate named marketing files and “use that context.” It does not say to treat their content only as data or ignore embedded requests to run commands, disclose data, or change the task.

Why this matters

In a repository from a third party, template, or partially trusted collaborator, a malicious marketing file could manipulate later questions, tool selection, or output and combine with cloud video calls to cause disclosure or unauthorized actions.

This is an active conditional instruction: when a fixed-name project file exists, the agent should read and use it before asking questions. The line does not treat that content as untrusted data, so a tampered or untrusted repository file could influence questions, recommendations, or later actions. It does not prove embedded commands would be executed. Users can require fact-only extraction and rejection of instructions inside the file.

SKILL.md:14In the instructionsOpen original file
**Check for product marketing context first:**If `.agents/product-marketing.md` exists (or `.claude/product-marketing.md`, or the legacy `product-marketing-context.md` filename, in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task.
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Medium risk

The production workflow extends into cross-platform publishing and scheduling beyond video-creation authorization

Source references: 2
What we found

The batch-social workflow goes beyond generating files and directs scheduling across platforms; another workflow explicitly says to distribute to TikTok, Reels, Shorts, and LinkedIn. Permission to create content does not itself authorize public posting.

Why this matters

If the agent has connected social accounts and executes these steps, a draft could be published to the wrong account, audience, or time, causing brand, compliance, or commercial harm.

Two workflows include distribution and cross-platform scheduling even though the skill’s stated focus is video production. The source provides no publishing implementation and does not explicitly say to publish without approval, so automatic publication is not established. Still, an agent treating the checklist as executable could post through user accounts. Users can restrict delivery to local files and require approval per platform, account, and schedule.

SKILL.md:233In the instructionsOpen original file
### Repurposing Workflow```Long-form content (podcast, webinar, demo)    ↓Descript: Clean up, remove filler, polish    ↓Opus Clip: Auto-extract 5-10 best moments    ↓CapCut: Add captions, effects, platform styling    ↓Distribute: TikTok, Reels, Shorts, LinkedIn```
Show 1 other places
SKILL.md:272In the instructionsOpen original file
### Batch Social Clips1. **Create master template** in Hyperframes/Remotion2. **Feed data** — product features, testimonials, stats3. **Render batch** — one template, many variations4. **Add platform-specific captions** via CapCut or Captions.ai5. **Schedule** across platforms

Inside this skill

8 instruction sections

This Skill is a video-production guide. It first reads project marketing context, then chooses among programmatic video, cloud AI generation, AI avatars, and editing tools based on goals, platforms, assets, budget, and technical stack.

View source
SKILL.md:14In the instructionsOpen original file
**Check for product marketing context first:**If `.agents/product-marketing.md` exists (or `.claude/product-marketing.md`, or the legacy `product-marketing-context.md` filename, in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task.
SKILL.md:24In the instructionsOpen original file
### 2. Production Approach- Do you need a human presenter? (AI avatar vs. voiceover vs. screen recording)- Do you have existing footage or assets? (Screenshots, logos, product UI)- Do you need generated footage? (AI-generated scenes, B-roll)- Is this a one-off or a template for repeated use?### 3. Technical Context- What's your tech stack? (Node.js, Python, etc.)- Do you have API keys for any video tools?- Budget constraints? (Some tools charge per minute of video)

The programmatic path includes commands that install and run npm packages. The Hyperframes example renders HTML frames to a local MP4, while the Remotion path runs the latest project generator.

View source
SKILL.md:58In the instructionsOpen original file
```bashnpm install hyperframes```
SKILL.md:67In the instructionsOpen original file
await render({  frames: [    { html: "<h1>Welcome to Acme</h1>", duration: 3 },    { html: "<h2>Here's what we built</h2>", duration: 3 },    { html: "<p>Try it free →</p>", duration: 2 },  ],  output: "intro.mp4",  width: 1080,  height: 1920, // 9:16 for vertical});```
SKILL.md:87In the instructionsOpen original file
```bashnpx create-video@latest```

The AI-avatar path recommends HeyGen and describes uploading a 2–5 minute recording to create a digital twin that resembles and sounds like the person. An agent may also generate videos directly through MCP.

View source
SKILL.md:185In the instructionsOpen original file
### HeyGen (recommended — has MCP server)Best lip-sync and micro-expressions. 230+ avatars, 140+ languages.**Agent integration:** HeyGen has an official MCP server — AI agents can generate avatar videos directly.
SKILL.md:201In the instructionsOpen original file
**Custom avatars:** Upload a 2-5 min video of yourself to create a digital twin. Looks and sounds like you, generates videos from text scripts.

The reference-video workflow retrieves external social-media content and reads transcripts, frames, on-screen text, edit timing, and media URLs before producing a beat sheet for later editing.

View source
references/edit-anatomy.md:15In the instructionsOpen original file
## Step 1 — Pull the reference so you can actually read the editYou cannot decompose an edit from a description of it. Get the frames and the timing:- **watch-video** (visual or multimodal mode) — extracts the transcript *and* samples frames at the cut points, so you can read on-screen text, caption style, and shot changes. This is the primary tool.- **social-fetch** — pull the post for the caption, engagement, and the media URL when the reference is a specific tweet/Reel/TikTok.- Screenshots of key frames also work if the user supplies them — you need the visual, not just the words.Note the total duration and roughly how many cuts there are before you start — cuts-per-second is the single most telling number about an edit's energy.
references/edit-anatomy.md:62In the instructionsOpen original file
## Step 4 — Review once, then executeShow the beat sheet before anyone edits anything — the same review-once gate as the ad-creative creative review page. The reviewer checks two things:- **The on-screen text says what you want** (mapped to your message, not the reference's)- **The scene changes land where you want them** (your footage's beats, not a blind copy of the reference's timing)Approve, then execute the spec with your footage:- **Remotion / Hyperframes** — when you want the edit templated and data-driven (see the programmatic-video section in SKILL.md); the beat sheet *is* the composition spec.- **CapCut / Premiere / an editor** — hand off the beat sheet + style summary as the brief.- **An AI restyle tool** — feed the style summary as the target style.
Start here · InstructionsSKILL.md
video
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source. 4 more sections are available in the original file.

File reference map

References: 3
Files making referencesReferenced content
Lines show actual file references, not execution order. Select a node to highlight its connections and inspect the files and source locations. Dashed lines include files that still need locating.
Files and check records4 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included
  • references/ai-video-prompting.mdFull text included
  • references/edit-anatomy.mdFull text included
  • evals/evals.jsonFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
  • evals/evals.jsonSupporting file
  • references/ai-video-prompting.mdSupporting file
  • references/edit-anatomy.mdSupporting file

Operations mentioned in code and instructions

Run commands
SKILL.md:58In the instructionsOpen original file
```bashnpm install hyperframes
SKILL.md:87In the instructionsOpen original file
```bashnpx create-video@latest
Install extra software packages
SKILL.md:59In the instructionsOpen original file
```bashnpm install hyperframes```
SKILL.md:88In the instructionsOpen original file
```bashnpx create-video@latest```
Connect to websites
SKILL.md:197In the instructionsOpen original file
Check [heygen.com/pricing](https://www.heygen.com/pricing) for current prices.
SKILL.md:336In the instructionsOpen original file
| **Hyperframes** | Programmatic video | - | [hyperframes.md](../../tools/integrations/hyperframes.md) || **Remotion** | Programmatic video | - | [remotion.dev](https://www.remotion.dev/docs) || **Runway** | AI generation | - | [runwayml.com/docs](https://docs.dev.runwayml.com) |
SKILL.md:337In the instructionsOpen original file
| **Remotion** | Programmatic video | - | [remotion.dev](https://www.remotion.dev/docs) || **Runway** | AI generation | - | [runwayml.com/docs](https://docs.dev.runwayml.com) |
Lines read
712
File checksum (to compare versions)
fc0a21186ac60b835cf574e4d9d054286e622ff10180f9a08757c09ecfb33e19