clipper
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external binaries including
ffmpeg,ffprobe, and thecpcommand via the Pythonsubprocessmodule. These executions are performed using list-based arguments instead of shell strings, which effectively prevents shell injection vulnerabilities. These operations are essential for the skill's primary function of video clipping and post-processing. - [SAFE]: The skill implements a
sanitize_filenamefunction in its extraction scripts to ensure that clip titles derived from transcription analysis do not result in path traversal or other file system exploits. Additionally, the skill utilizes Python'stempfilemodule for intermediate processing steps, adhering to secure development practices for file handling.
Audit Metadata