audio-video-to-text
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The transcription script uses the subprocess module to call ffmpeg for audio processing. By passing arguments as a list and avoiding shell execution, the skill protects against command injection via untrusted file paths.
- [EXTERNAL_DOWNLOADS]: The skill utilizes official Python packages and requires the system-level installation of ffmpeg. The Whisper library's behavior of downloading pre-trained models from verified repositories is standard and safe.
Audit Metadata