ffmpeg-cut-concat

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes ffmpeg and ffprobe via the scripts/cut.py helper script. It properly uses list-based arguments for the subprocess.run calls, which effectively prevents shell injection vulnerabilities. The script also includes proper escaping for internal configuration files used by ffmpeg (e.g., list.txt for the concat demuxer).
  • [EXTERNAL_DOWNLOADS]: The documentation in references/patterns.md describes the use of the protocol_whitelist feature, which allows ffmpeg to process media streams from network protocols such as HTTP and HTTPS. This is documented as a standard feature for handling remote media assets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 09:45 AM
Security Audit — agent-trust-hub — ffmpeg-cut-concat