skillhash

Is video safe?

Grade A, 95/100. No meaningful risk found.

When the user wants to create, generate, or produce video content using AI tools or programmatic frameworks. Also use when the user mentions 'video production,' 'AI video,' 'Remotion,' 'Hyperframes,' 'HeyGen,' 'Synthesia,' 'Veo,' 'Sora,' 'Runway,' 'Kling,' 'Seedance,' 'Hailuo,' 'MiniMax,' 'Pika,' 'Hunyuan,' 'Wan,' 'video generation,' 'AI avatar,' 'talking head video,' 'programmatic video,' 'video template,' 'explainer video,' 'product demo video,' 'record a product demo,' 'feature demo video,' 'in-app demo,' 'video pipeline,' 'copy this edit,' 'match this video style,' 'reverse-engineer this video,' 'edit like this reference,' or 'make me a video.' Use this for video creation, generation, and production workflows. For video content strategy and what to post, see social. For paid video ad creative, see ad-creative.

coreyhaines31/marketingskills/skills/video 56kChecked 3h agoContent last changed 3h ago
A

video

skills/video
95/100 · No meaningful risk found4 low

When the user wants to create, generate, or produce video content using AI tools or programmatic frameworks. Also use when the user mentions 'video production,' 'AI video,' 'Remotion,' 'Hyperframes,' 'HeyGen,' 'Synthesia,' 'Veo,' 'Sora,' 'Runway,' 'Kling,' 'Seedance,' 'Hailuo,' 'MiniMax,' 'Pika,' 'Hunyuan,' 'Wan,' 'video generation,' 'AI avatar,' 'talking head video,' 'programmatic video,' 'video template,' 'explainer video,' 'product demo video,' 'record a product demo,' 'feature demo video,' 'in-app demo,' 'video pipeline,' 'copy this edit,' 'match this video style,' 'reverse-engineer this video,' 'edit like this reference,' or 'make me a video.' Use this for video creation, generation, and production workflows. For video content strategy and what to post, see social. For paid video ad creative, see ad-creative.

Content hash
sha256:75700ff59a2cb3f889386c9d2c150678712cdbefb3a6852d414806beb419da6c
Files
5
Quality
100/100

Security findings

  • lowUnpinned package installSL501 · skills/video/SKILL.md:59
    npx hyperframes init my-video && cd my-video

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

  • lowUnpinned package installSL501 · skills/video/SKILL.md:60
    npx hyperframes preview # live preview

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

  • lowUnpinned package installSL501 · skills/video/SKILL.md:61
    npx hyperframes render -o output.mp4 # render index.html

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

  • lowHides actions from the userSL102 · skills/video/references/product-demo-recording.md:164
    **API keys:** the TTS key belongs in an environment variable (e.g. `ELEVENLABS_API_KEY`) or a secret manager, loaded by the script at runtime. Never ask the us…

    The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

  • infoUnpinned package installSL501 · skills/video/references/product-demo-recording.md:51
    npx playwright install chromium --with-deps

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Files in this skill
  • SKILL.md14.8 KB
  • evals/evals.json11.6 KB
  • references/ai-video-prompting.md5.1 KB
  • references/edit-anatomy.md7.4 KB
  • references/product-demo-recording.md10.4 KB

Questions about video

Is video safe to install?
Our scanner gave video grade A (95/100): no meaningful risk found. It matched 4 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install video in Claude Code or Codex?
Run skillhash add github:coreyhaines31/marketingskills/skills/video. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if video changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from coreyhaines31/marketingskills