skills/aj47/agent-skills/clipper/Gen Agent Trust Hub

clipper

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes external binaries including ffmpeg, ffprobe, and the cp command via the Python subprocess module. These executions are performed using list-based arguments instead of shell strings, which effectively prevents shell injection vulnerabilities. These operations are essential for the skill's primary function of video clipping and post-processing.
  • [SAFE]: The skill implements a sanitize_filename function in its extraction scripts to ensure that clip titles derived from transcription analysis do not result in path traversal or other file system exploits. Additionally, the skill utilizes Python's tempfile module for intermediate processing steps, adhering to secure development practices for file handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 02:28 AM