ffmpeg-synth

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate utility for media engineering and testing. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
  • [COMMAND_EXECUTION]: The helper script scripts/synth.py executes the ffmpeg binary using subprocess.run. The implementation is secure as it passes the command as a list of arguments rather than a raw shell string, effectively mitigating shell injection risks. Additionally, input parameters such as resolutions and durations are validated or typed within the script.
  • [DATA_EXPOSURE]: No sensitive file access or network exfiltration patterns were identified. The skill's operations are limited to reading documentation and generating local media files as requested by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:53 AM
Security Audit — agent-trust-hub — ffmpeg-synth