gemini-omni-video-to-sticker-gif
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/video_to_gif.py executes ffmpeg commands to extract frames and generate GIF files. The commands are executed using subprocess.run with a list of arguments, which effectively prevents shell command injection.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided file paths and formatting parameters. 1. Ingestion points: video_path, output_path, and crop/scale parameters provided via CLI in scripts/video_to_gif.py. 2. Boundary markers: Not present. 3. Capability inventory: Subprocess calls to ffmpeg and local file creation. 4. Sanitization: subprocess.run usage avoids shell evaluation. The parse_crop function enforces numeric extraction for specific parameters.
Audit Metadata