golang-video-dash

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides structured instructions for executing the FFmpeg binary using Go's os/exec package. It specifically mitigates command injection risks by mandating the use of opaque IDs and explicitly warning against the concatenation of user-provided filenames into the execution context.
  • [SAFE]: The documentation emphasizes robust security practices, such as using exec.CommandContext to enforce timeouts and prevent resource exhaustion, implementing input validation via ffprobe to verify media containers before processing, and ensuring atomic file operations to prevent partial data exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 09:03 PM
Security Audit — agent-trust-hub — golang-video-dash