media-batch
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to generate and execute shell commands for media manipulation. It uses
GNU paralleland Python'ssubprocess.runto orchestrate multipleffmpegorImageMagickinstances. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8) where external data (such as filenames or user-provided arguments) is interpolated into command templates.
- Ingestion points: Filenames gathered via
findcommands and user-controlled arguments like--ffmpeg-argsand--out-extinscripts/batch.py. - Boundary markers: None identified for isolating command templates from potentially malicious data in filenames.
- Capability inventory: The skill has extensive command execution capabilities, including the ability to run arbitrary shell strings via
GNU paralleland local scripts. - Sanitization:
scripts/batch.pyemploysshlex.quote()for directory paths to mitigate path injection, andGNU parallelprovides automatic quoting for input placeholders ({}), which reduces the risk of filename-based shell injection.
Audit Metadata