ffmpeg-transcode

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous recipes for running ffmpeg and ffprobe commands to process media files. These commands are standard for the task and do not involve suspicious parameters.
  • [COMMAND_EXECUTION]: The helper script scripts/transcode.py uses subprocess.run() to execute ffmpeg. It correctly passes arguments as a list and does not use shell=True, which is a security best practice to prevent shell injection vulnerabilities.
  • [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscation were found. The skill's behavior aligns exactly with its stated purpose of providing a video transcoding utility.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:53 AM
Security Audit — agent-trust-hub — ffmpeg-transcode