media-processing

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts video_optimize.py, media_convert.py, and batch_resize.py interface with system-level binaries (ffmpeg, ffprobe, and magick). Analysis of the code confirms that these commands are executed using list-based arguments without the shell=True parameter, which is a best practice to prevent command injection vulnerabilities from untrusted file names or parameters.
  • [NO_CODE]: The binary file scripts/tests/.coverage was analyzed and identified as a standard SQLite database produced by the coverage.py tool. It contains metadata regarding code execution paths during testing and shows no evidence of malicious intent or data exfiltration.
  • [EXTERNAL_DOWNLOADS]: The documentation in SKILL.md provides installation instructions that point to well-known and official project websites for FFmpeg and ImageMagick. These references are for user configuration and are not executed automatically by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 11:56 PM
Security Audit — agent-trust-hub — media-processing