video-animate@1.0.0
CAUTIONPublisher claims: "Animate a video once the previz, characters, moodboard, script and sound exist. Decide per element whether code, AI video or both makes it, pick Seedance 2.5 or another model per shot, run a cheap 480p pass before paying for quality, choose one long generation or short clips, roll takes that differ only in performance, cut picture to the locked track, and generate plates the next agent can add motion design to and edit. Built from working AI filmmakers, vendor guides, sync standards and the film and animation canon, with frame counts, prompts, a take checker and a database directory. Use for "animate my previz", "Blender to Seedance", "three.js to video", "grey box to video", "which model for this shot", "Seedance or Kling", "long take or short clips", "480p draft", "animate to the beat", "cartoon timing", "music video from my previz", "footage ready for motion design". Not for building the previz (threejs-animatic, varg-previz), making the sound (video-sound) or the final edit (varg-video-editing)." Observed in sandbox: static analysis only — behavior not yet observed.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-04 and scored it 66/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Refusal suppression. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
What would make this Verified
14 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim vargai: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- New publisher≈ +3 on the totalTime clears this on its own after 14 and 30 days. Claiming the handle (+50) is the fastest way past it.
- Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.