nvidia-video-forge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited nvidia-video-forge (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
OpenCode mirror: sourced from ~/.config/opencode/skills/nvidia-video-forge and mirrored for OpenCode CLI usage.Build videos as a reproducible pipeline with explicit run state, bridge artifacts, and resumable iterations.
asset_graph.json (image/video/audio/url/youtube/blog/product/person/overlay).brand_profile.json) and optional ASR storyboard (asr_plan.json).chat_bridge (same chat session; no codex exec).nvidia_qa, openai_api, dual.--judge-max-iterations, --judge-max-minutes).manifest.json, QA files, bridge files, final/rejected video, dashboard).Generate in default chat-bridge mode:
python3 scripts/video_forge.py generate \
--prompt "Branded product reel with smooth camera motion" \
--input-product-image /absolute/path/product.png \
--input-person-image /absolute/path/person.jpg \
--input-url https://example.com \
--overlay-template world_news \
--hosted \
--api-key-env NVIDIA_API_KEYResume after judge response in same run:
python3 scripts/video_forge.py resume \
--run-dir /absolute/path/output/nvidia-video-forge/<run-id> \
--judge-response /absolute/path/judge_response.jsonDebug ingestion only:
python3 scripts/video_forge.py ingest \
--input-url https://example.com \
--input-blog-url https://example.com/blog/post \
--input-youtube-url https://www.youtube.com/watch?v=... \
--out-dir /absolute/path/ingest-preview--hosted).chat_bridge; this path writes bridge artifacts and exits with code 3 while waiting for resume.chat_bridge does not execute external judge tasks by itself.--google-service-account-json (RECOMMENDED) or Antigravity OAuth. Direct GOOGLE_API_KEY is PROHIBITED per OpenSIN mandate.running: candidate generation and QA loop in progress.awaiting_judge: bridge package emitted; run must be resumed with judge JSON.completed: final output accepted and written.failed: budget exhausted or all candidates rejected.scripts/video_forge.py: main CLI orchestrator (generate, resume, ingest, qa, voice, probe).scripts/source_adapters.py: multisource normalization and crawling.scripts/brand_profile.py: brand extraction heuristics.scripts/asr_pipeline.py: audio timeline/storyboard planning.scripts/overlay_engine.py: FFmpeg overlay templates + file overlays.scripts/video_judge_chat_bridge.py: bridge request/schema/template generation + response normalization.scripts/video_qa_gate_openai_compat.py: strict QA gate.references/cli.md: CLI catalog and examples.references/model-matrix.md: judge/generation model routing notes.references/troubleshooting.md: failure modes and fixes.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.