ffmpeg-media-finishing

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The helper script scripts/media_probe.py utilizes subprocess.run to invoke ffprobe. The implementation is secure as it uses an argument list (argv) and avoids shell execution, preventing shell injection vulnerabilities. The executable path is resolved safely using shutil.which, and the inputs are validated.
  • [EXTERNAL_DOWNLOADS]: The skill includes reference links to official documentation for FFmpeg, as well as international media standards from ITU-R, EBU, and W3C. These resources are well-known, trusted, and used strictly for technical guidance and verification of media specifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 12:54 PM
Security Audit — agent-trust-hub — ffmpeg-media-finishing