ffmpeg-frames-images
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes 'ffmpeg' through a Python wrapper script.
- Evidence: 'subprocess.run(cmd, check=False)' is used in 'scripts/frames.py' to run commands.
- Security: Arguments are passed as a list to the subprocess, which effectively prevents shell-based command injection vulnerabilities.
- [DATA_EXPOSURE]: The skill operates on local video and image files provided as arguments.
- Evidence: Command construction in 'scripts/frames.py' uses provided file paths for input and output.
- Security: No access to sensitive files (e.g., SSH keys, credentials) or environment variables was detected.
- [REMOTE_CODE_EXECUTION]: The skill does not involve remote code or external dependencies.
- Evidence: 'scripts/frames.py' uses only Python standard library modules.
- Security: No network calls or external package installations are performed during skill execution.
Audit Metadata