otio-convert
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/otio.pyscript executes various OpenTimelineIO command-line tools (such asotioconvert,otiocat, andotiotool) to process user-provided files. These operations are performed safely usingsubprocess.runwith argument lists, which prevents shell injection vulnerabilities. The script also includes a--dry-runmode and echoes commands to stderr for transparency. - [EXTERNAL_DOWNLOADS]: The documentation instructs users to install the
OpenTimelineIO-Pluginspackage viapip. OpenTimelineIO is a well-known, industry-standard project maintained by the Academy Software Foundation (ASWF). The installation of this standard library is necessary for the skill's functionality and follows best practices for dependency management.
Audit Metadata