ffmpeg-drm

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The included scripts/drm.py helper script executes external binaries ffmpeg and openssl. It employs safe execution patterns by passing arguments as lists to subprocess.call, which prevents shell injection. Additionally, it features a redaction mechanism to ensure sensitive keys are not leaked to the logs during execution.
  • [DATA_EXPOSURE]: The skill manages AES-128 keys and initialization vectors. It implements several security best practices, such as using the cryptographically secure secrets module for key generation, applying restrictive file permissions (0o600) to sensitive files, and providing clear instructions to exclude these files from version control via .gitignore.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 09:39 PM
Security Audit — agent-trust-hub — ffmpeg-drm