ffmpeg-ocr-logo
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate functionality for video manipulation and metadata extraction using established tools. Analysis of the scripts and instructions reveals no malicious patterns, obfuscation, or unauthorized data access.
- [COMMAND_EXECUTION]: The skill uses a Python script (scripts/ocrlogo.py) to execute ffmpeg commands. The script follows security best practices by using list-based arguments with subprocess.run and shlex.quote for logging, which prevents shell injection vulnerabilities.
- [PROMPT_INJECTION]: While the skill processes untrusted external data (text extracted via OCR and QR payloads), which is a potential surface for indirect prompt injection, this is an inherent property of the tool's intended purpose. The skill does not contain instructions to override system behavior or bypass safety guidelines.
Audit Metadata