otio-convert

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/otio.py script executes various OpenTimelineIO command-line tools (such as otioconvert, otiocat, and otiotool) to process user-provided files. These operations are performed safely using subprocess.run with argument lists, which prevents shell injection vulnerabilities. The script also includes a --dry-run mode and echoes commands to stderr for transparency.
  • [EXTERNAL_DOWNLOADS]: The documentation instructs users to install the OpenTimelineIO-Plugins package via pip. OpenTimelineIO is a well-known, industry-standard project maintained by the Academy Software Foundation (ASWF). The installation of this standard library is necessary for the skill's functionality and follows best practices for dependency management.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:54 AM
Security Audit — agent-trust-hub — otio-convert