ffmpeg-cut-concat
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes ffmpeg and ffprobe via the
scripts/cut.pyhelper script. It properly uses list-based arguments for thesubprocess.runcalls, which effectively prevents shell injection vulnerabilities. The script also includes proper escaping for internal configuration files used by ffmpeg (e.g., list.txt for the concat demuxer). - [EXTERNAL_DOWNLOADS]: The documentation in
references/patterns.mddescribes the use of theprotocol_whitelistfeature, which allows ffmpeg to process media streams from network protocols such as HTTP and HTTPS. This is documented as a standard feature for handling remote media assets.
Audit Metadata