ffmpeg-streaming

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the ffmpeg binary via a Python helper script to perform media processing tasks. The script scripts/stream.py constructs a command-line argument list from user parameters and uses subprocess.call() to execute it. The implementation follows security best practices by passing arguments as a list rather than a single string, effectively preventing shell injection attacks.
  • [SAFE]: The documentation includes standard placeholders for credentials and connection details. SKILL.md and references/muxers.md contain example placeholders like STREAM-KEY and passphrase=secretpass123. These are non-functional placeholders used for instructional purposes and do not represent hardcoded secrets or sensitive data exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:54 AM
Security Audit — agent-trust-hub — ffmpeg-streaming