ffmpeg-ops
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements media processing logic through a collection of Python and Shell scripts. Technical analysis confirms that all external utility calls to
ffmpegandffprobeare performed using secure argument lists, precluding command injection vulnerabilities. - [COMMAND_EXECUTION]: The skill automates complex command-line operations for media analysis and encoding. The usage of
subprocess.runacross scripts likeprobe-media.py,detect-segments.py, andsmart-compress.pyis verified to be safe and limited to the intended media processing functions. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data from media metadata and JSON configuration files (EDL), it does so within a strictly technical scope. There is no evidence of an exploitable surface that would allow untrusted data to manipulate the agent's high-level instructions.
Audit Metadata