ffmpeg-docs
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from the official FFmpeg project website.
- Evidence: The script
scripts/ffdocs.pycontains a hardcodedBASEURL pointing tohttps://ffmpeg.organd usesurllib.requestto retrieve content. - [COMMAND_EXECUTION]: Instructs the agent to execute a local Python script for documentation lookup and management.
- Evidence:
SKILL.mdcontains multiple examples demonstrating how to useuv runto executescripts/ffdocs.pyfor search, fetch, and indexing tasks. - [PROMPT_INJECTION]: The skill ingests data from an external website, which creates an indirect prompt injection surface.
- Evidence: The
fetchandsearchcommands inscripts/ffdocs.pyprovide external documentation content to the agent. - Ingestion points:
scripts/ffdocs.pyreads HTML content fromffmpeg.orgmanually. - Boundary markers: The script provides structure by identifying headings and anchor IDs in the output.
- Capability inventory: The skill facilitates network read operations, local file writes for caching, and script execution.
- Sanitization: The script uses a custom
TextExtractorclass to parse HTML, explicitly skipping<script>,<style>,<nav>, and<footer>tags to provide clean text to the agent.
Audit Metadata