ffmpeg-drm
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The included
scripts/drm.pyhelper script executes external binariesffmpegandopenssl. It employs safe execution patterns by passing arguments as lists tosubprocess.call, which prevents shell injection. Additionally, it features a redaction mechanism to ensure sensitive keys are not leaked to the logs during execution. - [DATA_EXPOSURE]: The skill manages AES-128 keys and initialization vectors. It implements several security best practices, such as using the cryptographically secure
secretsmodule for key generation, applying restrictive file permissions (0o600) to sensitive files, and providing clear instructions to exclude these files from version control via.gitignore.
Audit Metadata