golang-video-dash
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides structured instructions for executing the FFmpeg binary using Go's
os/execpackage. It specifically mitigates command injection risks by mandating the use of opaque IDs and explicitly warning against the concatenation of user-provided filenames into the execution context. - [SAFE]: The documentation emphasizes robust security practices, such as using
exec.CommandContextto enforce timeouts and prevent resource exhaustion, implementing input validation viaffprobeto verify media containers before processing, and ensuring atomic file operations to prevent partial data exposure.
Audit Metadata