ffmpeg-synth
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate utility for media engineering and testing. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
- [COMMAND_EXECUTION]: The helper script
scripts/synth.pyexecutes theffmpegbinary usingsubprocess.run. The implementation is secure as it passes the command as a list of arguments rather than a raw shell string, effectively mitigating shell injection risks. Additionally, input parameters such as resolutions and durations are validated or typed within the script. - [DATA_EXPOSURE]: No sensitive file access or network exfiltration patterns were identified. The skill's operations are limited to reading documentation and generating local media files as requested by the user.
Audit Metadata