ffmpeg-speed-time
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/time.py) to executeffmpegandffprobecommands. - The implementation uses
subprocess.callandsubprocess.check_outputwith argument lists (rather than shell strings), which prevents shell injection vulnerabilities. - Argument quoting via
shlex.quoteis used for logging and temporary configuration files to ensure safe handling of file paths containing spaces or special characters. - [SAFE]: No remote code execution, data exfiltration, or obfuscation patterns were detected. The skill follows best practices for executing external CLI tools.
Audit Metadata