media-qc-delivery
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions provide best practices for media production and delivery triage, referencing official documentation from well-known platforms and standards bodies for technical specifications.
- [COMMAND_EXECUTION]: The skill suggests using ffprobe and ffmpeg for technical inspection of media files. This is standard practice in media workflows and the commands are used for metadata analysis and loudness measurement, not for executing arbitrary user-provided shell code.
- [SAFE]: The scripts/verify_manifest.py script is a utility for validating file integrity using SHA-256 hashes. It includes security-focused implementations such as directory traversal prevention, secure relative path resolution, and checking for symlink escapes when opening files.
- [SAFE]: The tests/test_verify_manifest.py file uses subprocess.run to execute the local verification script for unit testing purposes. The command is constructed using a fixed path to the script and the current sys.executable, avoiding shell injection risks by passing arguments as a list and not using shell=True.
Audit Metadata