losslesscut
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-documented utility for media management. It contains no obfuscation, credential exfiltration, or malicious prompt injection patterns. Its operational directives include safety guidelines, such as refusing to assist with DRM circumvention.
- [COMMAND_EXECUTION]: The provided Python scripts in
SKILL.mdandgpt.mduse thesubprocessmodule to executeffmpegandffprobe. These implementations correctly use list-based arguments for command execution, which mitigates the risk of shell injection from untrusted filenames. - [DATA_EXPOSURE]: The skill instructions and scripts access local media files and metadata (via
ffprobe) for the intended purpose of trimming and joining video segments. No sensitive system files or credentials are targeted. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests file paths provided by the user, it does not interpret data from those files as instructions, and its use of structured subprocess calls prevents the file metadata from influencing the underlying system execution environment.
Audit Metadata