minimax-h3-profile-distiller
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/analyze_video.pyexecutes localffmpegandffprobebinaries. The command construction uses argument lists rather than shell strings, preventing shell injection vulnerabilities. The usage is strictly for technical metadata extraction as intended by the skill.- [DATA_EXFILTRATION]: The skill operates on local workspace files and does not contain any network communication patterns. Instructions explicitly warn the agent against downloading external URLs or bypassing access controls.- [SAFE]: Installation and scaffolding scripts (scripts/install_profile.pyandscripts/scaffold_profile.py) include validation checks such as regex-based slug verification and bundle integrity checks (e.g., forbidding symlinks), which protect the local filesystem from manipulation.
Audit Metadata