ffmpeg-ocio-colorpro

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local binaries such as ffmpeg, ociobake, and ociocheck to perform color space transformations and LUT baking. These executions are handled safely via Python's subprocess.run using list-based arguments, which avoids shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The documentation references official OpenColorIO configurations and ACES bundles from trusted organizations, including the Academy Software Foundation (AcademySoftwareFoundation) and Colour Science (colour-science) on GitHub. These are industry-standard resources for color management.
  • [SAFE]: The Python script scripts/colorpro.py includes input validation and escaping for FFmpeg filter arguments (_escape_filter_value) to ensure that user-provided color space names do not break the filtergraph syntax. No data exfiltration, persistence, or obfuscation patterns were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:53 AM
Security Audit — agent-trust-hub — ffmpeg-ocio-colorpro