media-processor
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system commands for media processing (
ffmpeg,magick,convert) using the Pythonsubprocess.runmethod. The implementation uses list-based arguments instead of shell strings, which is a best-practice security measure that prevents shell injection vulnerabilities even when handling user-provided file paths. - [EXTERNAL_DOWNLOADS]: The skill manifest identifies
ffmpegandimagemagickas system dependencies to be installed viaapt-get. These are widely used, reputable open-source tools required for the skill's stated purpose of media manipulation.
Audit Metadata